CVE-2026-98919Published
drm/xe: harden adjust_idledly() against divide-by-zero and overflow
cve-program ·
Vendor product: Linux · Vendor product: Linux
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
694472 source statements · aliases may refer to the same vulnerabilityCVE-2026-98918Published
mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-98871Published
crypto: ccp - Fix possible deadlock in SEV init failure path
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-111183Published
GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
cve-program ·
Vendor product: GStreamer
CVE-2026-111184Published
NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability
cve-program ·
Vendor product: NoMachine
CVE-2026-92208Published
NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability
cve-program ·
Vendor product: NoMachine
CVE-2026-92209Published
NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability
cve-program ·
Vendor product: NoMachine
CVE-2026-92183Published
GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
cve-program ·
Vendor product: GIMP
CVE-2026-113461Published
mk-oracle: Local privilege escalation via insecure Oracle Home library loading
cve-program ·
Vendor product: Checkmk
CVE-2026-111813Published
Apache Traffic Server: magick plugin passes client query strings unfiltered to ImageMagick convert in the default configuration
cve-program ·
Vendor product: Apache Traffic Server
CVE-2025-31699Published
Apache Traffic Server: Origin connection still owed a request body is reused, enabling request smuggling
cve-program ·
Vendor product: Apache Traffic Server
CVE-2025-55702Published
Apache Traffic Server: An unread Expect: 100-continue request body is framed as a new request
cve-program ·
Vendor product: Apache Traffic Server
CVE-2026-111814Published
Apache Traffic Server: Default server_session_sharing.match omits MASK_CERT, allowing pooled mTLS identity confusion at the origin
cve-program ·
Vendor product: Apache Traffic Server
CVE-2026-111815Published
Apache Traffic Server: TLS session ticket resumption bypasses per-SNI verify_client STRICT enforcement
cve-program ·
Vendor product: Apache Traffic Server
CVE-2026-111811Published
Apache Traffic Server: tsmemcache plugin exposes the shared proxy cache over the network with no authentication
cve-program ·
Vendor product: Apache Traffic Server
CVE-2026-111812Published
Apache Traffic Server: origin_server_auth signs client-controlled AWS headers under the proxy's IAM credentials
cve-program ·
Vendor product: Apache Traffic Server
CVE-2026-91637Published
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While…
cve-program ·
Vendor product: Oracle Essbase
CVE-2026-91638Published
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While…
cve-program ·
Vendor product: Oracle Essbase
CVE-2026-91658Published
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase. While…
cve-program ·
Vendor product: Oracle Essbase
CVE-2026-91663Published
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise Oracle Essbase. W…
cve-program ·
Vendor product: Oracle Essbase
CVE-2026-91651Published
Vulnerability in Oracle Essbase (component: Essbase Web Platform). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E…
cve-program ·
Vendor product: Oracle Essbase
CVE-2026-91635Published
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Essbase.…
cve-program ·
Vendor product: Oracle Essbase
CVE-2026-91647Published
Vulnerability in Oracle Essbase (component: Security). The supported version that is affected is 21.8.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Essbase. Suc…
cve-program ·
Vendor product: Oracle Essbase
CVE-2026-101500Published
Vulnerability in the Oracle Global Lifecycle Management OPatchAuto product of Oracle Global Lifecycle Management (component: Database extensions). Supported versions that are affected are 12.2.0.1.16-12.2.0.1.52. Easily exploitable vulnera…
cve-program ·
Vendor product: Oracle Global Lifecycle Management OPatchAuto
CVE-2026-87351Published
Vulnerability in Oracle GoldenGate (component: Admin Server Executable). Supported versions that are affected are 19.1.0.0.0-19.32.0.0, 21.3-21.23 and 23.4-23.26.3.0.0. Easily exploitable vulnerability allows low privileged attacker wi…
cve-program ·
Vendor product: Oracle GoldenGate
CVE-2026-101481Published
Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infra…
cve-program ·
Vendor product: Oracle Secure Backup
CVE-2026-101482Published
Vulnerability in Oracle Secure Backup (component: Device Management and Support). Supported versions that are affected are 19.1.0.0.0 and 19.1.0.1.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infra…
cve-program ·
Vendor product: Oracle Secure Backup
CVE-2026-76587Published
IBM Planning Analytics Buffer Overflow
cve-program ·
Vendor product: Planning Analytics
CVE-2026-82891Published
IBM Guardium Data Protection is affected by a security vulnerability
cve-program ·
Vendor product: Guardium Data Protection
CVE-2026-92559Published
IBM App Connect Enterprise is vulnerable to a credential exposure
cve-program ·
Vendor product: App Connect Enterprise
CVE-2026-91299Published
Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are 9.2.0.0-9.2.26.5. Easily exploitable vulnerability allows unauthent…
cve-program ·
Vendor product: JD Edwards EnterpriseOne Orchestrator
CVE-2026-15723Published
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab
cve-program ·
Vendor product: GitLab
CVE-2026-76291Published
Improper Access Control through Scheduled Search Safeguards in Splunk Enterprise
cve-program ·
Vendor product: Splunk Enterprise
CVE-2026-115414Published
OS command injection in the Terraform hook in AWS SAM CLI
cve-program ·
Vendor product: aws-sam-cli
CVE-2026-66279Published
Dis-connect vulnerability in Connect Stack
cve-program ·
Vendor product: Connect SDK
CVE-2026-85080Published
Authenticated Denial-of-Service in Zigbee GetGroupMembership Handling
cve-program ·
Vendor product: EmberZNet
CVE-2026-66281Published
Authenticated Denial-of-Service in Zigbee Discover Attributes Handling
cve-program ·
Vendor product: EmberZNet
CVE-2026-66282Published
Authenticated Denial-of-Service in Zigbee Publish Billing Period
cve-program ·
Vendor product: EmberZNet
CVE-2026-94502Published
Out-of-bounds write in Zigbee Publish Price Matrix handling
cve-program ·
Vendor product: EmberZNet
CVE-2026-89410Published
Out-of-bounds read in Z-Wave NCP SPI Handler
cve-program ·
Vendor product: Z-Wave SDK
CVE-2026-109122Published
Kiloview E3 NDI Encoder OS Command Injection
cve-program ·
Vendor product: E3 Firmware
CVE-2026-111100Published
Kiloview E3 NDI Encoder Missing Authentication for Critical Function
cve-program ·
Vendor product: E3 Firmware
CVE-2026-96616Published
Kiloview E3 NDI Encoder Insufficient Session Expiration
cve-program ·
Vendor product: E3 Firmware
CVE-2026-105265Published
Kiloview E3 NDI Encoder Path Traversal
cve-program ·
Vendor product: E3 Firmware
CVE-2026-110491Published
Kiloview E3 NDI Encoder NULL Pointer Dereference
cve-program ·
Vendor product: E3 Firmware
CVE-2026-107861Published
Kiloview E3 NDI Encoder OS Command Injection
cve-program ·
Vendor product: E3 Firmware
CVE-2026-110243Published
Kiloview E3 NDI Encoder OS Command Injection
cve-program ·
Vendor product: E3 Firmware
CVE-2026-110825Published
Kiloview E3 NDI Encoder Missing Authentication for Critical Function
cve-program ·
Vendor product: E3 Firmware
CVE-2026-115546Published
Authentication Source Verification Issue in Okta Access Gateway
cve-program ·
Vendor product: Okta Access Gateway
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.