Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

694174 source statements · aliases may refer to the same vulnerability

CVE-2026-50525Published

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.5Source modified 28 Oct 2026Recorded 29 Oct 2026

CVE-2026-50524Published

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.5Source modified 28 Oct 2026Recorded 29 Oct 2026

CVE-2026-91262Published

Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with net…

cve-program ·

Vendor product: Oracle WebCenter Content

CVSS 3.1 5.4Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-47304Published

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.

nvd ·

CVSS 3.1 · [email protected] · Secondary 8.1 · CVSS 3.1 · [email protected] · Primary 9.8Source modified 28 Oct 2026Recorded 29 Oct 2026

CVE-2026-47303Published

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

nvd ·

CVSS 3.1 · [email protected] · Secondary 8.8Source modified 28 Oct 2026Recorded 29 Oct 2026

CVE-2026-47302Published

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.5Source modified 28 Oct 2026Recorded 29 Oct 2026

CVE-2026-47300Published

Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

nvd ·

CVSS 3.1 · [email protected] · Secondary 8.8Source modified 28 Oct 2026Recorded 29 Oct 2026

CVE-2026-77468Published

Lychee: Missing Authentication for Critical Function and Allocation of Resources Without Limits or Throttling on /docs/api

cve-program ·

Vendor product: Lychee

CVSS 4.0 6.9Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-91282Published

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Portal SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthenticated attacker with ne…

cve-program ·

Vendor product: JD Edwards EnterpriseOne Tools

CVSS 3.1 5.9Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-91281Published

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated…

cve-program ·

Vendor product: JD Edwards EnterpriseOne Tools

CVSS 3.1 6.1Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-55103Published

Discourse ActivityPub: Fix inbound actor validation and apply outbound request SSRF hardening

cve-program ·

Vendor product: discourse-activity-pub

CVSS 3.1 8.6Source modified 28 Oct 2026Recorded 28 Oct 2026

GHSA-r5wg-q8fc-p6w2Published

Highcharts Grid parses pagination language options as HTML

osv · CVE-2026-118254

npm: @highcharts/grid-lite · npm: @highcharts/grid-pro

HIGHSource modified 28 Oct 2026Recorded 28 Oct 2026

GHSA-jqgh-w3cc-7jqwPublished

Highcharts Dashboards: `proto` data table id writes sync listeners to `Object.prototype`

osv · CVE-2026-118243

npm: @highcharts/dashboards

MODERATESource modified 28 Oct 2026Recorded 28 Oct 2026

GHSA-rmqc-xvr3-v46cPublished

Highcharts: dotted series.keys paths write to Object.prototype

osv · CVE-2026-118250

npm: highcharts · npm: highcharts · npm: highcharts

HIGHSource modified 28 Oct 2026Recorded 28 Oct 2026

GHSA-gfvx-2c2g-38wqPublished

Highcharts: series column construction writes to Object.prototype

osv · CVE-2026-118249

npm: highcharts

HIGHSource modified 28 Oct 2026Recorded 28 Oct 2026

GHSA-65hg-cf3f-5m39Published

Highcharts Core: HTML text parsing falls back to unfiltered `innerHTML` during printing

osv · CVE-2026-118244

npm: highcharts · npm: highcharts

HIGHSource modified 28 Oct 2026Recorded 28 Oct 2026

GHSA-6g3c-p4fg-xv47Published

Highcharts Grid: custom icon definition objects written with raw `setAttribute` on `<path>`

osv · CVE-2026-118242

npm: @highcharts/grid-lite · npm: @highcharts/grid-pro

HIGHSource modified 28 Oct 2026Recorded 28 Oct 2026

GHSA-5793-x2q3-c3q7Published

Highcharts: `javascript:` URL in credits.href runs script on click

osv · CVE-2026-118251

npm: highcharts · npm: highcharts · npm: highcharts

HIGHSource modified 28 Oct 2026Recorded 28 Oct 2026

GHSA-c75x-9x9h-28rmPublished

Highcharts Dashboards / Grid Pro: `DataTable.setCell` and column writers treat `proto` as an existing column.

osv · CVE-2026-118247

npm: @highcharts/dashboards · npm: @highcharts/grid-pro

MODERATESource modified 28 Oct 2026Recorded 28 Oct 2026

GHSA-35rr-xwfh-x789Published

Highcharts Core: `breadcrumbs.style` keys become SVG event-handler attributes

osv · CVE-2026-118246

npm: highcharts · npm: highcharts · npm: highcharts

HIGHSource modified 28 Oct 2026Recorded 28 Oct 2026

GHSA-58g7-7f52-h92cPublished

Highcharts Dashboards parses fullscreen labels as HTML

osv · CVE-2026-118253

npm: @highcharts/dashboards

HIGHSource modified 28 Oct 2026Recorded 28 Oct 2026

GHSA-6hgp-fmhr-mrg4Published

Highcharts Grid: `javascript:` URL in credits.href runs script on click

osv · CVE-2026-118255

npm: @highcharts/dashboards · npm: @highcharts/grid-pro

HIGHSource modified 28 Oct 2026Recorded 28 Oct 2026

GHSA-mw4f-gj5x-6xr4Published

Highcharts Core: `javascript:` URL in an `xlink:href` attribute survives text filtering and reaches exported charts

osv · CVE-2026-116796

npm: highcharts · npm: highcharts · npm: highcharts

HIGHSource modified 28 Oct 2026Recorded 28 Oct 2026

GHSA-rcqf-f6h2-ccg9Published

Highcharts Dashboards parses sidebar component labels as HTML

osv · CVE-2026-118252

npm: @highcharts/dashboards

HIGHSource modified 28 Oct 2026Recorded 28 Oct 2026

GHSA-5ghw-9mgr-jvx2Published

Highcharts Grid Pro: cell-renderer `attributes` map written with raw `setAttribute`

osv · CVE-2026-116797

npm: @highcharts/grid-pro · npm: @highcharts/dashboards

HIGHSource modified 28 Oct 2026Recorded 28 Oct 2026

GHSA-grj7-r4jv-pw9jPublished

Highcharts Dashboards: `chartConstructor` is an unchecked lookup into the Highcharts namespace

osv · CVE-2026-118245

npm: @highcharts/dashboards

HIGHSource modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-91280Published

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with…

cve-program ·

Vendor product: JD Edwards EnterpriseOne Tools

CVSS 3.1 6.1Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-91279Published

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attacker with…

cve-program ·

Vendor product: JD Edwards EnterpriseOne Tools

CVSS 3.1 6.1Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-91278Published

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows low privileged…

cve-program ·

Vendor product: JD Edwards EnterpriseOne Tools

CVSS 3.1 5.5Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-61702Published

OpenPrinting CUPS: root-side banner file disclosure

cve-program ·

Vendor product: cups

CVSS 3.1 5.3Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-91277Published

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthent…

cve-program ·

Vendor product: JD Edwards EnterpriseOne Orchestrator

CVSS 3.1 5.3Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-91276Published

Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthe…

cve-program ·

Vendor product: JD Edwards EnterpriseOne Orchestrator

CVSS 3.1 5.3Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-91275Published

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows high privile…

cve-program ·

Vendor product: JD Edwards EnterpriseOne Tools

CVSS 3.1 6.6Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-91274Published

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Difficult to exploit vulnerability allows unauthentica…

cve-program ·

Vendor product: JD Edwards EnterpriseOne Tools

CVSS 3.1 6.5Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-62761Published

Windows DHCP Server Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows Server 2012 · Vendor product: Windows Server 2012 (Server Core installation) · Vendor product: Windows Server 2012 R2

CVSS 3.1 7.8Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-62752Published

Windows Kerberos Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 7.8Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-54683Published

NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user until 3.0.3 (incomplete fix of CVE-2026-49463)

cve-program ·

Vendor product: nl-portal-backend-libraries

CVSS 3.1 6.5Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-91273Published

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Object and Env Tech SEC). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthenticated attac…

cve-program ·

Vendor product: JD Edwards EnterpriseOne Tools

CVSS 3.1 8.6Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-112188Published

MISP Server Settings Lookup Exposes Sensitive Configuration Data via Branch Name Resolution

cve-program ·

Vendor product: MISP

CVSS 4.0 7.1Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2025-7043Published

Refresh Token Misuse via Validation Flaw in Multiple WSO2 Products Enables Unauthorized Resource Consumption

cve-program ·

Vendor product: WSO2 API Manager · Vendor product: WSO2 Universal Gateway · Vendor product: WSO2 API Control Plane

CVSS 3.1 5.4Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-9659Published

Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formFilter functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code executi…

cve-program ·

Vendor product: Totolink

CVSS 3.1 9.1Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-42019Published

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An a…

cve-program ·

Vendor product: Totolink

CVSS 3.1 9.1Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-42020Published

Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An a…

cve-program ·

Vendor product: Totolink

CVSS 3.1 9.1Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-40615Published

A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution…

cve-program ·

Vendor product: Totolink

CVSS 3.1 9.1Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-41222Published

A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An at…

cve-program ·

Vendor product: Totolink

CVSS 3.1 9.1Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-33568Published

A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An attacke…

cve-program ·

Vendor product: Totolink

CVSS 3.1 9.1Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-41223Published

A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. An …

cve-program ·

Vendor product: Totolink

CVSS 3.1 9.1Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-55240Published

Tianji: Remote Code Execution via lodash template evaluate pattern in survey feed templates

cve-program ·

Vendor product: tianji

CVSS 3.1 9.1Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-28763Published

A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R (version(s): TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327). A specially crafted HTTP request can lead to arbitrary code execution. A…

cve-program ·

Vendor product: Totolink

CVSS 3.1 9.1Source modified 28 Oct 2026Recorded 28 Oct 2026

CVE-2026-40627Published

An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can m…

cve-program ·

Vendor product: Totolink

CVSS 3.1 9.1Source modified 28 Oct 2026Recorded 28 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.