Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
694539 source statements · aliases may refer to the same vulnerabilityDell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to an Elevation of Privilege and arb…
cve-program ·
Vendor product: Application Store
smrealms smr Album Website AlbumEditProcessor.php isUrlReachable server-side request forgery
cve-program ·
Vendor product: smr
Vanus 0.8.0 through 0.9.0 Missing Authentication via Gateway CloudEvents HTTP Receiver
cve-program ·
Vendor product: vanus
Pillow: Infinite loop in MIC n_frames when the embedded TIFF
cve-program ·
Vendor product: Pillow
Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS
cve-program ·
Vendor product: Pillow
TiBillet Lespass APIv1 serializers.py get_img_from_url server-side request forgery
cve-program ·
Vendor product: Lespass
Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images
cve-program ·
Vendor product: Pillow
Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)
cve-program ·
Vendor product: Pillow
Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compress
osv · CVE-2026-63209 · GO-2026-5841
Go: github.com/klauspost/compress
@angular/router: Denial of Service via Unmatched Empty-Path Outlet Route Matching in Server-Side Rendering (SSR)
osv · CVE-2026-111752
npm: @angular/router · npm: @angular/router · npm: @angular/router
Hono: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths
osv · CVE-2026-109955 · CVE-2026-111757
npm: hono
markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes
osv · CVE-2026-111759
npm: markdown-it · npm: markdown-it
@angular/platform-server: Open Redirect via Protocol-Relative URLs in Server-Side Rendering (SSR)
osv · CVE-2026-111754
npm: @angular/platform-server · npm: @angular/platform-server · npm: @angular/platform-server
Pillow: Argument Injection in Ghostscript call, potentially leading into RCE
cve-program ·
Vendor product: Pillow
H3C Magic NX15 RPC esps write code injection
cve-program ·
Vendor product: Magic NX15
TS4500 Tape Library Denial of Service
cve-program ·
Vendor product: Storage TS4500 Library
IBM ContextForge MCP Gateway is affected by server-side request forgery
cve-program ·
Vendor product: ContextForge MCP Gateway
Craft CMS 5.8.0 before 5.11.0 Admin RCE via ContentBlock Field Layout
cve-program ·
Vendor product: cms
IBM Verify Identity Access and IBM Security Verify Access Hard-coded Credentials
cve-program ·
Vendor product: Verify Identity Access · Vendor product: Security Verify Access
LangAlpha through 2026.09.07 Cross-Tenant Sandbox Exposure via Shared Docker Bridge
cve-program ·
Vendor product: LangAlpha
Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint
cve-program ·
https://pypi.org: Langchain-Chatchat
Aix-DB 1.2.4 Authenticated RCE via ChatBI Common Agent Execute Tool
cve-program ·
Vendor product: Aix-DB
LearnPress before 4.4.10 Missing Authorization via Legacy Editor AJAX Handlers
cve-program ·
Vendor product: LearnPress
LavaLite CMS through 10.1.2 Missing Authentication via Filer Download Routes
cve-program ·
Vendor product: cms
Ning compress-lzf before 1.2.0 Out-of-Bounds Memory Access via UnsafeChunkDecoder
cve-program ·
Vendor product: compress-lzf
Coze Studio before 0.5.0 RCE via Unsandboxed Local Python Code Runner
cve-program ·
Vendor product: coze-studio
Wildfly-elytron-realm-token: parameter injection in eap's elytron oauth2
cve-program ·
https://access.redhat.com/downloads/content/package-browser/: org.wildfly.security/wildfly-elytron-realm-token · https://access.redhat.com/downloads/content/package-browser/: eap8-activemq-artemis · https://access.redhat.com/downloads/content/package-browser/: eap8-apache-cxf
Grav API Plugin before 1.0.42 Cache Exhaustion and Page Permission Bypass
cve-program ·
Vendor product: grav-plugin-api
Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious Code
cve-program ·
Vendor product: Rank Math SEO PRO
WordPress ShortPixel Image Optimizer plugin <= 6.5.5 - PHP Object Injection vulnerability
cve-program ·
https://wordpress.org/plugins: shortpixel-image-optimiser
Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read
cve-program ·
Vendor product: Pillow
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter …
cve-program ·
Vendor product: FortiClientWindows
Pillow: Quadratic GIF comment copying during save
cve-program ·
Vendor product: Pillow
Dolibarr CSP document.php protection mechanism
cve-program ·
Vendor product: Dolibarr
TS4500 Tape Library Race Condition
cve-program ·
Vendor product: Storage TS4500 Library
H3C Magic NX15 usrlist sub_416874 stack-based overflow
cve-program ·
Vendor product: Magic NX15
Security Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication
cve-program ·
Vendor product: TRIRIGA Application Platform
DB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent
cve-program ·
https://pypi.org: DB-GPT
DB-GPT through 0.8.2 Hardcoded MySQL Root Credentials in docker-compose Deployment
cve-program ·
Vendor product: DB-GPT
Letta through 0.16.8 Cross-Tenant Impersonation via user_id Header
cve-program ·
https://pypi.org: letta
Letta through 0.16.8 Credential Exposure via Tool Sandbox Environment Inheritance
cve-program ·
https://pypi.org: letta
DiviGear Carousel <= 5.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via update_license AJAX Action
cve-program ·
Vendor product: DiviGear Carousel
OpenCATS before 0.10.0 Missing Authorization via Import Revert Action
cve-program ·
Vendor product: OpenCATS
uTox through 0.18.1 Path Traversal via Auto-Accepted File Transfers
cve-program ·
Vendor product: uTox
@e2e-dev/github before 0.4.1 CI Report Hijacking via Predictable Comment Marker
cve-program ·
Vendor product: @e2e-dev/github
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.