CVE-2026-23270Published
net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks
cve-program ·
Vendor product: Linux · Vendor product: Linux
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
694708 source statements · aliases may refer to the same vulnerabilityCVE-2026-23253Published
media: dvb-core: fix wrong reinitialization of ringbuffer on reopen
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23248Published
perf/core: Fix refcount bug and potential UAF in perf_mmap
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23243Published
RDMA/umad: Reject negative data_len in ib_umad_write
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23242Published
RDMA/siw: Fix potential NULL pointer dereference in header processing
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23240Published
tls: Fix race condition in tls_sw_cancel_work_tx()
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23239Published
espintcp: Fix race condition in espintcp_close()
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23231Published
netfilter: nf_tables: fix use-after-free in nf_tables_addchain()
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23230Published
smb: client: split cached_fid bitfields to avoid shared-byte RMW races
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23216Published
scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23212Published
bonding: annotate data-races around slave->last_rx
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23210Published
ice: Fix PTP NULL pointer dereference during VSI rebuild
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23209Published
macvlan: fix error recovery in macvlan_common_newlink()
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23204Published
net/sched: cls_u32: use skb_header_pointer_careful()
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23202Published
spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-111985Published
AUTOMATIC1111 stable-diffusion-webui Metadata Extraction sd_models.py read_metadata_from_safetensors allocation of resources
cve-program ·
Vendor product: stable-diffusion-webui
CVE-2026-85243Published
Apache Camel: Camel-Crypto-PGP Integrity Verification Downgrade via Attacker-Controlled Message Structure
cve-program ·
https://repo.maven.apache.org/maven2: org.apache.camel:camel-crypto-pgp
CVE-2026-108983Published
GV-ASManager Web Server Command Injection Vulnerability
cve-program ·
Vendor product: GV-ASManager
CVE-2026-108120Published
path traversal inKoozali - SME Server
cve-program ·
Vendor product: SME Server
CVE-2026-85245Published
Apache Camel: Camel-Thrift Cross-Exchange Data Disclosure via a Shared Deserialization Target
cve-program ·
https://repo.maven.apache.org/maven2: org.apache.camel:camel-thrift
CVE-2026-112179Published
MISP Event Synchronization Exposes Non-Exportable Tags on Remote Instances
cve-program ·
Vendor product: MISP
CVE-2026-85246Published
Apache Camel: Camel-Mina Information Disclosure via Unmuted Consumer Exceptions
cve-program ·
https://repo.maven.apache.org/maven2: org.apache.camel:camel-mina
CVE-2026-112190Published
Webkul Aureus ERP composer.json insertion of sensitive information into debugging code
cve-program ·
Vendor product: Aureus ERP
CVE-2026-112287Published
Krayin CRM before 2.2.7 Broken Object Level Authorization in Mail Module
cve-program ·
https://packagist.org: laravel-crm
CVE-2026-112138Published
diem-project diem dmCodeEditor actions.class.php join path traversal
cve-program ·
Vendor product: diem
CVE-2026-111061Published
russh agent server converts constraint records into unbounded never-rolled-back tasks
cve-program ·
Vendor product: russh
CVE-2026-112210Published
Rhc: rhc: local privilege escalation via symlink following in rhc-canonical-facts.service
cve-program ·
https://access.redhat.com/downloads/content/package-browser/: rhc · https://access.redhat.com/downloads/content/package-browser/: rhc · https://access.redhat.com/downloads/content/package-browser/: rhc
CVE-2026-112292Published
CheckCle through 1.6.0 Missing Authorization via Empty PocketBase API Rules
cve-program ·
https://github.com/operacle/checkcle: checkcle
CVE-2026-12669Published
IBM MQ Out-of-bounds Read
cve-program ·
Vendor product: MQ Operator · Vendor product: MQ Advanced container images
CVE-2026-112199Published
WordPress YITH WooCommerce Wishlist plugin <= 4.18.1 - Cross Site Scripting (XSS) vulnerability
cve-program ·
https://wordpress.org/plugins: yith-woocommerce-wishlist
CVE-2026-12155Published
IBM MQ Deserialization of Untrusted Data
cve-program ·
Vendor product: MQ Operator · Vendor product: MQ Advanced container images
CVE-2026-23198Published
KVM: Don't clobber irqfd routing type when deassigning irqfd
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23193Published
scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-111839Published
WordPress Broadcast Live Video plugin <= 7.3.7 - Broken Access Control vulnerability
cve-program ·
https://wordpress.org/plugins: videowhisper-live-streaming-integration
CVE-2026-23191Published
ALSA: aloop: Fix racy access at PCM trigger
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23185Published
wifi: iwlwifi: mld: cancel mlo_scan_start_wk
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23180Published
dpaa2-switch: add bounds check for if_id in IRQ handler
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23178Published
HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report()
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23172Published
net: wwan: t7xx: fix potential skb->frags overflow in RX path
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23164Published
rocker: fix memory leak in rocker_world_port_post_fini()
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23154Published
net: fix segmentation of forwarding fraglist GRO
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23148Published
nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23146Published
Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23145Published
ext4: fix iloc.bh leak in ext4_xattr_inode_update_ref
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23144Published
mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23136Published
libceph: reset sparse-read state in osd_fault()
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23133Published
wifi: ath10k: fix dma_free_coherent() pointer
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23128Published
arm64: Set __nocfi on swsusp_arch_resume()
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23126Published
netdevsim: fix a race issue related to the operation on bpf_bound_progs list
cve-program ·
Vendor product: Linux · Vendor product: Linux
CVE-2026-23125Published
sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
cve-program ·
Vendor product: Linux · Vendor product: Linux
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.