Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
692407 source statements · aliases may refer to the same vulnerabilityKener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret
cve-program ·
Vendor product: kener
libyal libmsiecf through 20260525 Double Free via libmsiecf_url_values_read_data
cve-program ·
Vendor product: libmsiecf
Furnace through 0.6.8.3 Out-of-Bounds Write via FamiTracker GROOVES Block Import
cve-program ·
Vendor product: furnace
gbsplay through 0.0.103 Heap Out-of-Bounds Read via vgm_open in gbs.c
cve-program ·
Vendor product: gbsplay
FLTK through 1.4.5 Stack Buffer Overflow via Fl_BMP_Image colors_used Field
cve-program ·
Vendor product: fltk
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
cve-program ·
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
cve-program ·
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
cve-program ·
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.