Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
689964 source statements · aliases may refer to the same vulnerabilityA vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.
cve-program ·
Vendor product: Backup and Replication
A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges.
cve-program ·
Vendor product: Backup for Microsoft 365
A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote …
cve-program ·
Vendor product: Backup for Microsoft 365
A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path trave…
cve-program ·
Vendor product: Backup and Replication
A vulnerability in Veeam Agent for Linux allows for local privilege escalation. Only installations that are managed by a Veeam Backup & Replication instance are affected.
cve-program ·
Vendor product: Agent for Linux
Camunda Missing Authorization in Task Sub-Resources
cve-program ·
Vendor product: Camunda 7
When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team ("You are not a member of ..."), but the resources API endpoint could still be called directly, allowing any authenticated n…
cve-program ·
Vendor product: Server
Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table. These rows persist indefinitely — there is no automatic cleanup mechanism. Three distinct denial-of-service conditions fol…
cve-program ·
Vendor product: server
A user could create a docx or odt file with a # in the filename with confidential information such as a credit card number and have it not be marked as confidential.
cve-program ·
Vendor product: Files Confidential
A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or guest token.
cve-program ·
Vendor product: Richdocuments
A public shared collective always allowed recipients of the link to create pages.
cve-program ·
Vendor product: Collectives
App passwords were allowed to bypass password confirmation on sensitive endpoints.
cve-program ·
Vendor product: Server
A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT authentication token for another user. A low privileged attacker could continually exploit this vulnerability to leak the JWT aut…
cve-program ·
Vendor product: whiteboard
The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting user has manage-level permission on the table before returning the full list of share recipients (users, groups, and teams) …
cve-program ·
Vendor product: Tables
Rustls: Session Debug formatting exposes TLS master secrets and resumption PSKs
osv · RUSTSEC-2026-0346
crates.io: rustls · crates.io: rustls
undici WebSocket client vulnerable to Denial of Service via failed HTTP/2 handshake
osv · CVE-2026-109855
npm: undici
git-diff: OS command injection vulnerability via crafted strings to the gitDiff API
osv · CVE-2026-110634
npm: git-diff
rustls: An unauthenticated ServerHello poisons the per-name key-exchange record, so later ClientHellos carry only a classical X25519 share
osv · RUSTSEC-2026-0349
crates.io: rustls · crates.io: rustls
Rustls: Brotli certificate decompression can allocate an attacker-controlled amount of memory up to 1 GiB before authentication.
osv · RUSTSEC-2026-0348
crates.io: rustls · crates.io: rustls
rustls: ECH rejection can expose buffered application data to authenticated outer server before `ech_required` alert
osv · RUSTSEC-2026-0347
crates.io: rustls · crates.io: rustls
qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)
osv · CVE-2026-110816
npm: qs
knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
cve-program ·
Vendor product: pkg
libXi XGetDeviceControl Control Type Mismatch Heap Buffer Overflow
cve-program ·
Vendor product: libXi
Electronic Library Description Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
cve-program ·
Vendor product: Fusion
Fusion Protocol URL Reflected Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
cve-program ·
Vendor product: Fusion
Design Name Stored Cross-Site Scripting (XSS) in Autodesk Fusion Desktop
cve-program ·
Vendor product: Fusion
desmondmorris node-tesseract Command Builder tesseract.js process os command injection
cve-program ·
Vendor product: node-tesseract
bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
cve-program ·
Vendor product: Linux · Vendor product: Linux
drm/amdgpu: serialize vblank counter reads against GPU reset
cve-program ·
Vendor product: Linux · Vendor product: Linux
Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
Fireware OS Stack Buffer Overflow in VPN Network Access Enforcement Allows Unprivileged Code Execution
cve-program ·
Vendor product: Fireware OS
Fireware OS XPath Injection in SSH Authentication Allows Blind Extraction of Configuration Secrets
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
Fireware OS Authenticated Stack Buffer Overflow in certd Allows Denial of Service
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
Fireware OS Heap Buffer Overflow in AD Authentication Service Allows Pre-Authentication Remote Code Execution
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
Fireware OS Improper Authentication in AuthPoint MFA Verification Allows Session Hijacking
cve-program ·
Vendor product: Fireware OS
Fireware OS Pre-Authentication Integer Overflow in Access Portal Allows Out-of-Bounds Write
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
Fireware OS Stack Buffer Overflow in WireGuard Configuration Allows Remote Code Execution
cve-program ·
Vendor product: Fireware OS
Fireware OS Missing Authentication in FireCluster State Sync Allows BOVPN Tunnel Denial of Service
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
Fireware OS NULL Pointer Dereference in Management Interface Allows Unauthenticated Denial of Service
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
Host filesystem path disclosure via DNS rebinding
cve-program ·
https://repo.hex.pm: tidewave · https://github.com: tidewave-ai/tidewave_phoenix
better-auth: OAuth Proxy lets an attacker sign in as another user
osv · CVE-2026-110864
npm: better-auth
compress zstd: Panic on two-block frames
osv · CVE-2026-116591
Go: github.com/klauspost/compress/zstd
better-auth: OAuth state can be used as a Magic Link to sign in as another user
osv · CVE-2026-110862 · CVE-2026-114607
npm: better-auth
@better-auth/drizzle-adapter: Concurrent requests can exceed rate limits on PostgreSQL
osv · CVE-2026-110861
npm: @better-auth/drizzle-adapter · npm: @better-auth/kysely-adapter · npm: better-auth
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.