Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
693894 source statements · aliases may refer to the same vulnerabilityFTP connection reuse inherits client-certificate
cve-program ·
Vendor product: curl
SAIL: WebP decoder division by zero through malformed animated canvas metadata
cve-program ·
Vendor product: sail
SimulationCraft: Heap-Based Buffer Overflow / Out-of-Bounds Write in SimulationCraft's gem_id Array
cve-program ·
Vendor product: simc
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
cve-program ·
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
cve-program ·
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
cve-program ·
USB Test: Heap-based Buffer Overflow in getSectorSize via untrusted DISK_GEOMETRY.BytesPerSector leads to RCE/DoS
cve-program ·
Vendor product: usb-test
redirect to SFTP or SCP bypasses host verification
cve-program ·
Vendor product: curl
FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS
cve-program ·
Vendor product: FearlessCMS
Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported charts
cve-program ·
Vendor product: highcharts
OpenHop: Path Traversal in Flow ID File Operations
cve-program ·
Vendor product: openhop
NORA missing cross-user token-management authorization
cve-program ·
Vendor product: nora
Ember: Unneutralised terminal escape/control sequences from Caddy logs injected into the operator's TUI
cve-program ·
Vendor product: ember
onyx-dot-app Onyx PreviewTab.tsx cross site scripting
cve-program ·
Vendor product: Onyx
pig-mesh pig SqlFilterArgumentResolver.java orderItem.getColumn sql injection
cve-program ·
Vendor product: pig
Echo: Static Middleware Double-Unescape Path Traversal
cve-program ·
Vendor product: echo
phpIPAM Rack Link Creation show-rack-popup.php create_rack_link cross site scripting
cve-program ·
Vendor product: phpIPAM
FaveoSuite Faveo Helpdesk UnAuthController.php UnAuthController.resolve authorization
cve-program ·
Vendor product: Faveo Helpdesk
@happy-dom/server-renderer: ServerRendererServer Target-Origin Bypass SSRF / Open Proxy
cve-program ·
Vendor product: happy-dom
@hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths
cve-program ·
Vendor product: node-server
Travisun Opptrix Schedule API setup command injection
cve-program ·
Vendor product: Opptrix
LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests
cve-program ·
Vendor product: langgraph · Vendor product: langgraph-sdk
AnkiMCP: DNS rebinding reaches unauthenticated local AnkiMCP HTTP tools
cve-program ·
Vendor product: anki-mcp-server-addon
Xiaozhi-esp32-server before 0.9.8 IDOR via device address-book endpoint
cve-program ·
Vendor product: xiaozhi-esp32-server
Stored XSS in the VPN logs monitor
cve-program ·
Vendor product: Stormshield Network Security
Nuxt Ollama: public runtime configuration discloses the configured cloud API key
cve-program ·
Vendor product: nuxt-ollama
OpenResty lua-resty-dns before 0.24 Denial of Service via DNS Response Parsing
cve-program ·
Vendor product: lua-resty-dns
Camaleon CMS before 2.9.3 Path Traversal RCE via Media crop_url Action
cve-program ·
Vendor product: camaleon-cms
Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location
cve-program ·
Vendor product: asterisk · Vendor product: certified-asterisk
Kakao khaiii JSON Config File Linear.cpp open out-of-bounds
cve-program ·
Vendor product: khaiii
Wasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
cve-program ·
Vendor product: wasmtime
Apache Cocoon: XEE could lead to SSRF and information disclosure
cve-program ·
Vendor product: Apache Cocoon
MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
cve-program ·
Vendor product: mlflow
OpenReception: Confirmation-email links built from the request Host enable pending-account takeover via `POST /api/auth/resend-confirmation`
cve-program ·
Vendor product: appointment-booking-software
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with…
cve-program ·
Vendor product: Oracle SOA Suite
Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation
cve-program ·
Vendor product: twisted
Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability all…
cve-program ·
Vendor product: Oracle Business Process Management Suite
Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree
cve-program ·
Vendor product: twisted
Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with …
cve-program ·
Vendor product: Oracle SOA Suite
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.