Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

694708 source statements · aliases may refer to the same vulnerability

CVE-2026-111880Published

FreeRDP 2.0.0 before 3.32.0 Heap Out-of-Bounds Write via NTLM MIC Offset

cve-program ·

Vendor product: FreeRDP

CVSS 4.0 8.3 · CVSS 3.1 7.4Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112366Published

Picomatch through 4.0.7 ReDoS via single-branch repeated extglob patterns

cve-program ·

Vendor product: picomatch

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111891Published

phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via Group Permissions API

cve-program ·

Vendor product: phpMyFAQ

CVSS 4.0 7.0 · CVSS 3.1 5.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111896Published

phpMyFAQ 4.2.0-alpha before 4.2.0-beta Stored XSS via SVG Upload Sanitizer Bypass

cve-program ·

Vendor product: phpMyFAQ

CVSS 4.0 5.1 · CVSS 3.1 5.4Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111902Published

phpMyFAQ 4.2.0-alpha before 4.2.0-beta Authorization Bypass via Comments and Attachments API

cve-program ·

Vendor product: phpMyFAQ

CVSS 4.0 6.9 · CVSS 3.1 5.3Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111907Published

phpMyFAQ 4.0.0 before 4.1.9 CSRF via /admin/api/update-database

cve-program ·

Vendor product: phpMyFAQ

CVSS 4.0 7.1 · CVSS 3.1 7.1Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111912Published

Admidio 5.0.0 before 5.0.16 IDOR via Forum Topic Update

cve-program ·

Vendor product: admidio

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111918Published

Vikunja 1.0.0-rc0 before 2.7.0 Cross-Tenant Task Position Writes via Saved Filter Creation

cve-program ·

Vendor product: vikunja

CVSS 4.0 5.3 · CVSS 3.1 5.4Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111923Published

Fleet before 4.89.0 Unauthenticated DoS via Apple MDM Enrollment Plist Parsing

cve-program ·

Vendor product: fleet

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111929Published

Coder 2.30.0 before 2.34.8 Cross-Organization File Disclosure via DownloadFile RPC

cve-program ·

Vendor product: coder

CVSS 4.0 6.0 · CVSS 3.1 5.3Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111934Published

Coder before 2.34.7 IP Spoofing via X-Forwarded-For Header

cve-program ·

Vendor product: coder

CVSS 4.0 6.3 · CVSS 3.1 3.7Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111866Published

nemoTyrant manong func.php arr2sql sql injection

cve-program ·

Vendor product: manong

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111871Published

itsmeravitejak Online-Examination-System subjectsdb.php sql injection

cve-program ·

Vendor product: Online-Examination-System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111875Published

David-Crty Databasement Scheduled Restore SaveScheduledRestoreRequest.php authorization

cve-program ·

Vendor product: Databasement

CVSS 4.0 5.1 · CVSS 3.1 4.7 · CVSS 3.0 4.7 · CVSS 2.0 5.8Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112002Published

ProjectSend 2.5.0 before 2.7.0 Unverified Password Change via /settings/password

cve-program ·

Vendor product: ProjectSend

CVSS 4.0 7.6 · CVSS 3.1 6.8Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112007Published

Schism Tracker through 20260524 Heap Out-of-Bounds Write via ULT Loader

cve-program ·

https://github.com/schismtracker/schismtracker: Schism Tracker

CVSS 4.0 6.9 · CVSS 3.1 6.1Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112012Published

libtta through 2.3 Stack Out-of-Bounds Write via Zero Channel Count

cve-program ·

https://sourceforge.net/projects/tta/: libtta

CVSS 4.0 4.8 · CVSS 3.1 5.3Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112017Published

JeecgBoot before 3.9.5 SQL Injection via SqlInjectionUtil Newline Bypass

cve-program ·

Vendor product: JeecgBoot

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111984Published

AUTOMATIC1111 stable-diffusion-webui Card Builder ui_extra_networks.py create_item_html cross site scripting

cve-program ·

Vendor product: stable-diffusion-webui

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112046Published

OW2 ASM 9.11 before 9.11.1 Denial of Service via Infinite Loop in Label.resolve()

cve-program ·

https://repo1.maven.org/maven2/: ASM

CVSS 4.0 6.8 · CVSS 3.1 5.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112051Published

Xinference through 4.0.1 Path Traversal via model_name in Custom Model Registration

cve-program ·

https://pypi.org/project/xinference/: inference

CVSS 4.0 8.3 · CVSS 3.1 6.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112056Published

wvWare wv through 1.2.9 Heap Out-of-Bounds Read via wvGetSTSH

cve-program ·

https://github.com/AbiWord/wv: wv

CVSS 4.0 6.8 · CVSS 3.1 5.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112153Published

vraj404 Criminal-Management-System Officer Registration Form addOfficer.php mysqli_error sql injection

cve-program ·

Vendor product: Criminal-Management-System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111988Published

dyad-sh dyad OAuth Callback cross-site request forgery

cve-program ·

Vendor product: dyad

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112074Published

Tencent ncnn Conversion API mat_pixel.cpp yuv420sp2rgb integer overflow

cve-program ·

Vendor product: ncnn

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 7.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111993Published

Soarkey StudentManagement AdminDao.java UserDao.login cleartext storage

cve-program ·

Vendor product: StudentManagement

CVSS 4.0 4.8 · CVSS 3.1 3.3 · CVSS 3.0 3.3 · CVSS 2.0 1.7Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112028Published

light0011 cms Vote VoteController.class.php logic error

cve-program ·

Vendor product: cms

CVSS 4.0 6.9 · CVSS 3.1 6.5 · CVSS 3.0 6.5 · CVSS 2.0 6.4Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112032Published

aircheng-org iWebShop-5 util.php search sql injection

cve-program ·

Vendor product: iWebShop-5

CVSS 4.0 5.1 · CVSS 3.1 4.7 · CVSS 3.0 4.7 · CVSS 2.0 5.8Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112036Published

Artifex MuPDF Signature Locking pdf-xref.c free_char_list double free

cve-program ·

Vendor product: MuPDF

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112040Published

diem-project diem Sign-In BasedmUserActions.class.php redirect

cve-program ·

Vendor product: diem

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112044Published

dotnet eShop Catalog API Extensions.cs AddApplicationServices improper authentication

cve-program ·

Vendor product: eShop

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111053Published

FOSSBilling: Unauthenticated attacker can probe existence of arbitrary files via guest/system/template_exists

cve-program ·

Vendor product: FOSSBilling

CVSS 4.0 6.9Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112075Published

unslothai unsloth sentence_transformer.py externally-controlled input to select classes or code

cve-program ·

Vendor product: unsloth

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 7.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112079Published

hankcs HanLP torch_util.py load_word2vec_as_vocab_tensor deserialization

cve-program ·

Vendor product: HanLP

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 7.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112043Published

calcom cal.com/cal.diy Webhook util.ts createWebhookProcedure authorization

cve-program ·

Vendor product: cal.com · Vendor product: cal.diy

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112083Published

sgl-project SGLang Weight Exporter weight_exporter.py WeightExporter.send_weights_to_remote_instance denial of service

cve-program ·

Vendor product: SGLang

CVSS 4.0 6.9 · CVSS 3.1 5.3 · CVSS 3.0 5.3 · CVSS 2.0 5.0Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112089Published

Dav-ee dairy-management-system delete.php mysqli_query sql injection

cve-program ·

Vendor product: dairy-management-system

CVSS 4.0 5.1 · CVSS 3.1 4.7 · CVSS 3.0 4.7 · CVSS 2.0 5.8Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112093Published

subhajitkhan online-clinic-management-system feedback.php cross site scripting

cve-program ·

Vendor product: online-clinic-management-system

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112097Published

SourceCodester Inventory System Sales Management transactions_handler.php save_sale cross site scripting

cve-program ·

Vendor product: Inventory System

CVSS 4.0 5.1 · CVSS 3.1 3.5 · CVSS 3.0 3.5 · CVSS 2.0 4.0Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112102Published

AXA Group NLP.js Condition Expression Pipeline evaluator.js Evaluator.walkFunction code injection

cve-program ·

Vendor product: NLP.js

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 7.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112106Published

TufayelLUS TikTok-Video-Downloader-PHP TLS index.php certificate validation

cve-program ·

Vendor product: TikTok-Video-Downloader-PHP

CVSS 4.0 6.3 · CVSS 3.1 3.7 · CVSS 3.0 3.7 · CVSS 2.0 2.6Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112139Published

subhajitkhan online-clinic-management-system Administrative Mutation admindocview.php sql injection

cve-program ·

Vendor product: online-clinic-management-system

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112143Published

satya-vinay Events-Management-System missing authentication

cve-program ·

Vendor product: Events-Management-System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111915Published

Yank Note before 3.93.1 Path Traversal via /api/help Endpoint

cve-program ·

Vendor product: Yank Note

CVSS 4.0 8.2 · CVSS 3.1 5.9Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-111938Published

Frappe CRM before 1.74.0 Missing Authorization via add_note_to_call_log

cve-program ·

Vendor product: crm

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112265Published

LangBot through 4.11.0 Missing Lark/Feishu Webhook Authenticity Verification

cve-program ·

https://pypi.org: LangBot

CVSS 4.0 8.3 · CVSS 3.1 6.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112270Published

SGLang through 0.5.22 Memory Exhaustion via Mooncake STAGING_RSP chunk_idx

cve-program ·

Vendor product: sglang

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112275Published

Netpbm through 11.16.00 Heap Out-of-Bounds Write via rasttopnm pr_load_image

cve-program ·

https://sourceforge.net/p/netpbm/code/: Netpbm

CVSS 4.0 6.9 · CVSS 3.1 6.1Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112280Published

libaribb24 (aribb24) through 1.0.3 Heap Buffer Overflow via parse_data_unit_statement_body

cve-program ·

https://github.com/nkoriyama/aribb24: aribb24

CVSS 4.0 6.9 · CVSS 3.1 6.1Source modified 19 Oct 2026Recorded 23 Oct 2026

CVE-2026-112285Published

Thelia before 3.1.5 and 3.2.4 Coupon Usage Limit Bypass via Pay-Later Orders

cve-program ·

https://packagist.org: Thelia

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 19 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.