Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
699878 source statements · aliases may refer to the same vulnerabilityMCP Kotlin SDK's unbounded line buffer in StdioServerTransport/StdioClientTransport leads to memory exhaustion (DoS)
cve-program ·
Vendor product: io.modelcontextprotocol:kotlin-sdk · Vendor product: io.modelcontextprotocol:kotlin-sdk-client · Vendor product: io.modelcontextprotocol:kotlin-sdk-core
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If this vulnerability is exploited, an arbitrary OS command may be e…
cve-program ·
Vendor product: CAN-2-WF · Vendor product: CAN-2-USB
Sylius: Channel-based payment method restriction bypass on shop account orders API endpoint
cve-program ·
Vendor product: Sylius
n8n: Anonymous Approval-Gate Bypass via Reused resumeToken over the Chat WebSocket
cve-program ·
Vendor product: n8n
External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector
cve-program ·
Vendor product: Kibana
Apache HTTP Server: buffer overflow in mod_proxy_ajp via ajp_msg_check_header()
cve-program ·
Vendor product: Apache HTTP Server
pnpm v10+ Bypass "Dependency lifecycle scripts execution disabled by default"
cve-program ·
Vendor product: pnpm
Micrometer gRPC server instrumentation DoS vulnerability
cve-program ·
Vendor product: Micrometer
acl < 2.4.0 Symlink Traversal Privilege Escalation via libacl Functions
cve-program ·
Vendor product: acl
Apache HTTP Server: mod_xml2enc heap overflow
cve-program ·
Vendor product: Apache HTTP Server
jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)
cve-program ·
Vendor product: jackson-databind
undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression
cve-program ·
https://github.com/nodejs/undici/: undici
Org.keycloak/keycloak-services: improper enforcement of disabled identity provider in identitybrokerservice (authentication bypass)
cve-program ·
https://catalog.redhat.com/software/containers/: rhbk/keycloak-operator-bundle · https://catalog.redhat.com/software/containers/: rhbk/keycloak-rhel9 · https://catalog.redhat.com/software/containers/: rhbk/keycloak-rhel9-operator
undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation
cve-program ·
https://github.com/nodejs/undici/: undici
HTTP Request Smuggling via Chunked Extension Quoted-String Parsing
cve-program ·
https://repo.maven.apache.org/maven2: pkg://maven/org.eclipse.jetty/jetty-http
Versions of the package simple-git before 3.36.0 are vulnerable to Remote Code Execution (RCE) due to an incomplete fix for [CVE-2022-25912](https://security.snyk.io/vuln/SNYK-JS-SIMPLEGIT-3112221) that blocks the -c option but not the equi…
cve-program ·
Vendor product: simple-git · Vendor product: org.webjars.npm:simple-git
NGINX ngx_http_proxy_v2_module and ngx_http_grpc_module vulnerability
cve-program ·
Vendor product: NGINX Open Source · Vendor product: NGINX Plus
Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`
cve-program ·
Vendor product: Apache HTTP Server
shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`
cve-program ·
https://www.npmjs.com/package/shell-quote: shell-quote
Apache HTTP Server: mod_proxy_html buffer overflow
cve-program ·
Vendor product: Apache HTTP Server
In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable.
cve-program ·
Vendor product: Eclipse Jetty
Micrometer HTTP server instrumentations DoS vulnerability
cve-program ·
Vendor product: micrometer-core · Vendor product: micrometer-jetty11 · Vendor product: micrometer-jetty12
Apache Struts, Apache Struts: XXE vulnerability in outdated XWork component
cve-program ·
https://repo.maven.apache.org/maven2: com.opensymphony:xwork · https://repo.maven.apache.org/maven2: org.apache.struts.xwork:xwork-core
pnpm Lockfile Integrity Bypass Allows Remote Dynamic Dependencies
cve-program ·
Vendor product: pnpm
undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client
cve-program ·
https://github.com/nodejs/undici/: undici
n8n: Domain-Restriction Bypass via Unguarded Model-Search Endpoint in OpenAI Chat Model Node
cve-program ·
Vendor product: n8n
n8n: Cross-Tenant Project-Member PII Disclosure via Missing Per-Project Scope Check on Role Assignment Endpoints
cve-program ·
Vendor product: n8n
selinux: reject an unclaimed class value in security_get_classes()
cve-program ·
Vendor product: Linux · Vendor product: Linux
afs: Fix leak of ungot volume
cve-program ·
Vendor product: Linux · Vendor product: Linux
perf sched: Fix register_pid() overflow, strcpy, and BUG_ON
cve-program ·
Vendor product: Linux · Vendor product: Linux
bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat
cve-program ·
Vendor product: Linux · Vendor product: Linux
netfs: Fix netfs_read_folio() to wait on writeback
cve-program ·
Vendor product: Linux · Vendor product: Linux
erofs: fix managed cache race for unaligned extents
cve-program ·
Vendor product: Linux · Vendor product: Linux
ksmbd: fix durable reconnect error path file lifetime
cve-program ·
Vendor product: Linux · Vendor product: Linux
wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work()
cve-program ·
Vendor product: Linux · Vendor product: Linux
ksmbd: fix use-after-free in smb2_open during durable reconnect
cve-program ·
Vendor product: Linux · Vendor product: Linux
ksmbd: fix FSCTL permission bypass by adding a permission check for FSCTL_SET_SPARSE
cve-program ·
Vendor product: Linux · Vendor product: Linux
staging: rtl8723bs: os_dep: avoid NULL pointer dereference in rtw_cbuf_alloc
cve-program ·
Vendor product: Linux · Vendor product: Linux
bridge: mrp: reject zero test interval to avoid OOM panic
cve-program ·
Vendor product: Linux · Vendor product: Linux
ceph: fix oops due to invalid pointer for kfree() in parse_longname()
cve-program ·
Vendor product: Linux · Vendor product: Linux
wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load()
cve-program ·
Vendor product: Linux · Vendor product: Linux
pinctrl: mediatek: eint: Fix invalid pointer dereference for v1 platforms
cve-program ·
Vendor product: Linux · Vendor product: Linux
net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads
cve-program ·
Vendor product: Linux · Vendor product: Linux
ksmbd: fix WARNING "do not call blocking ops when !TASK_RUNNING"
cve-program ·
Vendor product: Linux · Vendor product: Linux
wifi: ath11k: Clear affinity hint before calling ath11k_pcic_free_irq() in error path
cve-program ·
Vendor product: Linux · Vendor product: Linux
net: fix NULL pointer dereference in l3mdev_l3_rcv
cve-program ·
Vendor product: Linux · Vendor product: Linux
net: libwx: fix Tx L4 checksum
cve-program ·
Vendor product: Linux · Vendor product: Linux
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.