Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
690021 source statements · aliases may refer to the same vulnerabilityTanium addressed an insufficient logging vulnerability in Tanium Server.
cve-program ·
Vendor product: Tanium Server
Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.
cve-program ·
Vendor product: Certificate Manager
Tanium addressed an information disclosure vulnerability in Tanium Server.
cve-program ·
Vendor product: Tanium Server
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
cve-program ·
Vendor product: Enforce
Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.
cve-program ·
Vendor product: Reputation
Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.
cve-program ·
Vendor product: Enforce
Tanium addressed an improper access controls vulnerability in Comply.
cve-program ·
Vendor product: Comply
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
cve-program ·
Vendor product: Endpoint Configuration Toolset Solution · Vendor product: end-user-cx
Tanium addressed an unauthorized code execution vulnerability in Threat Response.
cve-program ·
Vendor product: Threat Response
Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
cve-program ·
Vendor product: Endpoint Configuration Toolset Solution · Vendor product: threat-response-cx
Tanium addressed an improper access controls vulnerability in Comply.
cve-program ·
Vendor product: Comply
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
cve-program ·
Vendor product: Endpoint Configuration Toolset Solution · Vendor product: end-user-cx
Tanium addressed a denial of service vulnerability in Provision.
cve-program ·
Vendor product: Provision
Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.
cve-program ·
Vendor product: Endpoint Configuration Toolset Solution · Vendor product: performance-cx
Tanium addressed a denial of service vulnerability in Enforce.
cve-program ·
Vendor product: Enforce
Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.
cve-program ·
Vendor product: Tanium Server
Tanium addressed an improper output sanitization vulnerability in Enforce.
cve-program ·
Vendor product: Enforce
Tanium addressed an improper output sanitization vulnerability in Comply.
cve-program ·
Vendor product: Comply
Tanium addressed an improper access controls vulnerability in Enforce.
cve-program ·
Vendor product: Enforce
Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.
cve-program ·
Vendor product: Endpoint Configuration Toolset Solution · Vendor product: cx-stream
Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.
cve-program ·
Vendor product: Endpoint Configuration Toolset Solution · Vendor product: threat-response-cx
Tanium addressed a denial of service vulnerability in Enforce.
cve-program ·
Vendor product: Enforce
Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.
cve-program ·
Vendor product: Endpoint Configuration Toolset Solution · Vendor product: threat-response-cx
Tanium addressed a heap-based buffer overflow vulnerability in Index.
cve-program ·
Vendor product: Endpoint Configuration Toolset Solution · Vendor product: index-cx
Tanium addressed a denial of service vulnerability in Tanium Server.
cve-program ·
Vendor product: Tanium Server
Tanium addressed a compression bomb vulnerability in Enforce.
cve-program ·
Vendor product: Enforce
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
cve-program ·
Vendor product: Endpoint Configuration Toolset Solution · Vendor product: end-user-cx
Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.
cve-program ·
Vendor product: Endpoint Configuration Toolset Solution · Vendor product: threat-response-cx
Tanium addressed a SQL injection vulnerability in Provision.
cve-program ·
Vendor product: Provision
Tanium addressed a SQL injection vulnerability in Patch.
cve-program ·
Vendor product: Patch
oretnom23 php-travel-agency-system Contact Form contact_insert.php sql injection
cve-program ·
Vendor product: php-travel-agency-system
Cisco Unified Communications Products Hardening Release: October 2026 - Improper control of a resource through its lifetime.
cve-program ·
Vendor product: Cisco Emergency Responder · Vendor product: Cisco Unified Communications Manager · Vendor product: Cisco Unified Communications Manager IM and Presence Service
Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.
cve-program ·
Vendor product: Threat Response
OpenWISP Controller CA CRL REST API does not scope requests to managed organizations
cve-program ·
Vendor product: openwisp-controller
CVE-2026-16491 CVE Record
cve-program ·
Vendor product: Grafana Enterprise · Vendor product: Grafana Enterprise · Vendor product: Grafana OSS
Atlantis: OS command injection through PR-controlled Terraform workspace enables RCE during plan
cve-program ·
Vendor product: atlantis
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
cve-program ·
Vendor product: Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
cve-program ·
Vendor product: Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Cross-site Scripting (Reflected XSS) (CWE-79)
cve-program ·
Vendor product: Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
cve-program ·
Vendor product: Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
cve-program ·
Vendor product: Adobe Campaign Classic
Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)
cve-program ·
Vendor product: Adobe Campaign Classic
oretnom23 php-travel-agency-system Admin Record Pages customer_detail.php sql injection
cve-program ·
Vendor product: php-travel-agency-system
Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer
cve-program ·
Vendor product: asterisk · Vendor product: certified-asterisk
Access of resource using incompatible type ('type confusion') in EPICS Base
cve-program ·
Vendor product: EPICS Base
Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk
cve-program ·
Vendor product: asterisk · Vendor product: certified-asterisk
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.