Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
699754 source statements · aliases may refer to the same vulnerabilitySupportCandy 3.3.6 - 3.5.2 - Unauthenticated Ticket Content Disclosure via Auth Code Leak
cve-program ·
Vendor product: SupportCandy
SSH improper host validation
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
sending old referer
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
exposing HTTP/3 early data
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
UAF after pause in socket callback
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
stale proxy password leak
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
incomplete mTLS config matching in conn reuse
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
env-set cross-proxy Digest auth state leak
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
password leak with netrc and user in URL
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
SASL double-free
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
trailing dot domain super cookie
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
wrong reuse for different services
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
wrong STARTTLS connection reuse
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
domain-scoped PSL domain cookie
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
wolfSSL CA-cache hit overrides callback
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
secure cookie attribute bypass with tab
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
native CA store conn reuse
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
OpenSSL pinning bypass
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
OpenSSL provider use-after-free
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
cross-proxy Digest auth state leak
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
netrc credential leak with reused proxy connection
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
stale custom cookie host causes cookie leak
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
proxy credentials leak over redirect-to proxy
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
wrong reuse of SMB connection
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
wrong reuse of HTTP Negotiate connection
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
connection reuse ignores TLS requirement
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
use after free in SMB connection reuse
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
wrong proxy connection reuse with credentials
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
token leak with redirect and netrc
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
Negotiate ambient user conn reuse
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
bad reuse of HTTP Negotiate connection
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
HTTP/2 server push UAF
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
OpenLDAP SASL authentication bypass
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
proto-default skips SSH verification
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
cross-origin Digest auth state leak
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
WS Auto-PONG memory exhaustion
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
Native CA trust persist
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
QUIC zero-length UDP datagrams busy-loop
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
HTTP/2 stream-dependency tree UAF
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
Out of bounds read for cookie path
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
libssh key passphrase bypass without agent set
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
libssh global known_hosts override
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
OpenSSL partial chain store policy bypass
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
bearer token leak on cross-protocol redirect
cve-program ·
Vendor product: curl · Vendor product: curl · Vendor product: curl
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.