Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
694708 source statements · aliases may refer to the same vulnerabilityWordPress HivePress plugin <= 1.7.32 - Content Injection vulnerability
cve-program ·
https://wordpress.org/plugins: hivepress
Insufficient session randomness vulnerability exists in certain NETGEAR EX Series Models
cve-program ·
Vendor product: EX3700 · Vendor product: EX6120
WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability
cve-program ·
https://wordpress.org/plugins: suretriggers
WordPress 2Way VideoCalls and Random Chat plugin <= 6.1.5 - Broken Authentication vulnerability
cve-program ·
https://wordpress.org/plugins: webcam-2way-videochat
NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis
cve-program ·
Vendor product: NoteGen
WordPress Kit (formerly ConvertKit) plugin <= 3.4.6 - Broken Access Control vulnerability
cve-program ·
https://wordpress.org/plugins: convertkit
WordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerability
cve-program ·
https://wordpress.org/plugins: login-with-phone-number
crypto: ccp: Don't attempt to copy ID to userspace if PSP command failed
cve-program ·
Vendor product: Linux · Vendor product: Linux
cifs: some missing initializations on replay
cve-program ·
Vendor product: Linux · Vendor product: Linux
netfilter: ip6t_eui64: reject invalid MAC header for all packets
cve-program ·
Vendor product: Linux · Vendor product: Linux
bridge: br_nd_send: linearize skb before parsing ND options
cve-program ·
Vendor product: Linux · Vendor product: Linux
net: ipv6: flowlabel: defer exclusive option free until RCU teardown
cve-program ·
Vendor product: Linux · Vendor product: Linux
openvswitch: validate MPLS set/set_masked payload length
cve-program ·
Vendor product: Linux · Vendor product: Linux
rxrpc: only handle RESPONSE during service challenge
cve-program ·
Vendor product: Linux · Vendor product: Linux
netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()
cve-program ·
Vendor product: Linux · Vendor product: Linux
af_unix: read UNIX_DIAG_VFS data under unix_state_lock
cve-program ·
Vendor product: Linux · Vendor product: Linux
mptcp: fix slab-use-after-free in __inet_lookup_established
cve-program ·
Vendor product: Linux · Vendor product: Linux
seg6: separate dst_cache for input and output paths in seg6 lwtunnel
cve-program ·
Vendor product: Linux · Vendor product: Linux
Input: uinput - fix circular locking dependency with ff-core
cve-program ·
Vendor product: Linux · Vendor product: Linux
btrfs: fix incorrect return value after changing leaf in lookup_extent_data_ref()
cve-program ·
Vendor product: Linux · Vendor product: Linux
netfilter: nft_ct: fix use-after-free in timeout object destroy
cve-program ·
Vendor product: Linux · Vendor product: Linux
tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG
cve-program ·
Vendor product: Linux · Vendor product: Linux
batman-adv: reject oversized global TT response buffers
cve-program ·
Vendor product: Linux · Vendor product: Linux
batman-adv: hold claim backbone gateways by reference
cve-program ·
Vendor product: Linux · Vendor product: Linux
drm/i915/gt: fix refcount underflow in intel_engine_park_heartbeat
cve-program ·
Vendor product: Linux · Vendor product: Linux
net: stmmac: fix integer underflow in chain mode
cve-program ·
Vendor product: Linux · Vendor product: Linux
mm: filemap: fix nr_pages calculation overflow in filemap_map_pages()
cve-program ·
Vendor product: Linux · Vendor product: Linux
rxrpc: Only put the call ref if one was acquired
cve-program ·
Vendor product: Linux · Vendor product: Linux
rxrpc: reject undecryptable rxkad response tickets
cve-program ·
Vendor product: Linux · Vendor product: Linux
rxrpc: Fix integer overflow in rxgk_verify_response()
cve-program ·
Vendor product: Linux · Vendor product: Linux
rxrpc: Fix buffer overread in rxgk_do_verify_authenticator()
cve-program ·
Vendor product: Linux · Vendor product: Linux
smb: client: fix OOB reads parsing symlink error response
cve-program ·
Vendor product: Linux · Vendor product: Linux
smb: client: avoid double-free in smbd_free_send_io() after smbd_send_batch_flush()
cve-program ·
Vendor product: Linux · Vendor product: Linux
usbip: validate number_of_packets in usbip_pack_ret_submit()
cve-program ·
Vendor product: Linux · Vendor product: Linux
arm64: mm: Handle invalid large leaf mappings correctly
cve-program ·
Vendor product: Linux · Vendor product: Linux
ocfs2: fix possible deadlock between unlink and dio_end_io_write
cve-program ·
Vendor product: Linux · Vendor product: Linux
KVM: x86: Use scratch field in MMIO fragment to hold small write values
cve-program ·
Vendor product: Linux · Vendor product: Linux
mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()
cve-program ·
Vendor product: Linux · Vendor product: Linux
can: gw: fix OOB heap access in cgw_csum_crc8_rel()
cve-program ·
Vendor product: Linux · Vendor product: Linux
drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib
cve-program ·
Vendor product: Linux · Vendor product: Linux
futex: Require sys_futex_requeue() to have identical flags
cve-program ·
Vendor product: Linux · Vendor product: Linux
wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down
cve-program ·
Vendor product: Linux · Vendor product: Linux
smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available
cve-program ·
Vendor product: Linux · Vendor product: Linux
Gitea API disclosure of private user social graph, keys and stars
cve-program ·
Vendor product: gitea.dev
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.