Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
694275 source statements · aliases may refer to the same vulnerabilitypower: supply: core: prevent unregistering a power supply while a callback runs
cve-program ·
Vendor product: Linux · Vendor product: Linux
accel/rocket: clear rdev on device init failure
cve-program ·
Vendor product: Linux · Vendor product: Linux
drm/xe: skip eviction of a BO with no resource
cve-program ·
Vendor product: Linux · Vendor product: Linux
drm/xe/oa: Zero OA buffer at allocation
cve-program ·
Vendor product: Linux · Vendor product: Linux
scsi: target: Disable interrupts while holding delayed_cmd_lock
cve-program ·
Vendor product: Linux · Vendor product: Linux
sched/core: Call wakeup_preempt() for queued tasks during class change
cve-program ·
Vendor product: Linux · Vendor product: Linux
net: hisilicon: hisi_femac: Move setting of netops to fix crash
cve-program ·
Vendor product: Linux · Vendor product: Linux
net: hisilicon: hip04_eth: Move setting of netops to fix crash
cve-program ·
Vendor product: Linux · Vendor product: Linux
net: ethernet: actions: Move setting of netops to fix crash
cve-program ·
Vendor product: Linux · Vendor product: Linux
net: mv643xx: move setting of netops to fix crash
cve-program ·
Vendor product: Linux · Vendor product: Linux
net: au1000: move setting of netops to fix crash
cve-program ·
Vendor product: Linux · Vendor product: Linux
net: ethoc: move setting of netops to fix crash
cve-program ·
Vendor product: Linux · Vendor product: Linux
net: ethernet: aeroflex: move setting of netops to fix crash
cve-program ·
Vendor product: Linux · Vendor product: Linux
net: ti: icssm-prueth: Move setting of netops to fix crash
cve-program ·
Vendor product: Linux · Vendor product: Linux
gpio: mxc: fix race between chained IRQ handler install and probe completion
cve-program ·
Vendor product: Linux · Vendor product: Linux
net: stmmac: dwmac1000: clear the RGMII status interrupt
cve-program ·
Vendor product: Linux · Vendor product: Linux
x86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx()
cve-program ·
Vendor product: Linux · Vendor product: Linux
accel/rocket: search every core slot when a core is removed
cve-program ·
Vendor product: Linux · Vendor product: Linux
mshv_vtl: Check per-CPU register page before mmap
cve-program ·
Vendor product: Linux · Vendor product: Linux
gpio: shared: fix use-after-free bug when adding shared proxies
cve-program ·
Vendor product: Linux · Vendor product: Linux
drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions
cve-program ·
Vendor product: Linux · Vendor product: Linux
drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl
cve-program ·
Vendor product: Linux · Vendor product: Linux
drm/i915/dmc: Add sanity check for DMC load address
cve-program ·
Vendor product: Linux · Vendor product: Linux
drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change
cve-program ·
Vendor product: Linux · Vendor product: Linux
sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue
cve-program ·
Vendor product: Linux · Vendor product: Linux
tracing: Fix crash in print_graph_function_event()
cve-program ·
Vendor product: Linux · Vendor product: Linux
cifs: don't update i_size in cifs_do_truncate without a cached handle
cve-program ·
Vendor product: Linux · Vendor product: Linux
selinux: fix BPF token permission checks
cve-program ·
Vendor product: Linux · Vendor product: Linux
s390/pai: Handle multiple PMU stop callback invocations
cve-program ·
Vendor product: Linux · Vendor product: Linux
KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes
cve-program ·
Vendor product: Linux · Vendor product: Linux
drm/amdgpu/userq: actually validate userq BOs
cve-program ·
Vendor product: Linux · Vendor product: Linux
smb: client: fix data corruption with concurrent writes and O_TRUNC
cve-program ·
Vendor product: Linux · Vendor product: Linux
ntfs: fix FITRIM range alignment
cve-program ·
Vendor product: Linux · Vendor product: Linux
sched_ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor
cve-program ·
Vendor product: Linux · Vendor product: Linux
ntfs: take invalidate_lock in ntfs_setattr_size()
cve-program ·
Vendor product: Linux · Vendor product: Linux
Incorrect session validation for API-created shredder exports
cve-program ·
https://pypi.python.org: pretix
Improper Restriction of XML External Entity Reference in Tactis' NoviGest Desktop App
cve-program ·
Vendor product: NoviGest Desktop App
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.