CVE-2026-111272Published
LibRaw through 0.22.2 Heap Out-of-Bounds Read via parseNikonMakernote ShotInfo
cve-program ·
Vendor product: LibRaw
Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
694793 source statements · aliases may refer to the same vulnerabilityCVE-2026-111278Published
NivoCart through 2.5.1 CAPTCHA Bypass via Answer Disclosed in Page HTML
cve-program ·
Vendor product: nivocart
CVE-2026-111321Published
TaskingAI through 0.3.0 SSRF via OpenAPI servers[0].url in Actions
cve-program ·
Vendor product: TaskingAI
CVE-2026-111330Published
JuggleIM im-server through 1.8.16 Weak Password Hashing via Unsalted SHA-1
cve-program ·
Vendor product: JuggleIM
CVE-2026-111345Published
Trudesk through 1.2.11 Authorization Bypass via GET /api/v1/messages/conversation/:id
cve-program ·
Vendor product: trudesk
CVE-2026-111350Published
Papermark through 0.22.0 Missing Authorization in Data Room Viewer Group API
cve-program ·
Vendor product: Papermark
CVE-2026-111355Published
zhontai Admin.Core through 10.1.0 Authorization Bypass via User and Organization By-ID Endpoints
cve-program ·
Vendor product: Admin.Core
CVE-2026-111364Published
MinDoc through 2.2-beta.2 IDOR via /api/:key/content/:id GET Branch
cve-program ·
Vendor product: MinDoc
CVE-2026-21119Published
Out-of-bounds read and write in lib_sag_ai_sound_sep_v2.00.so prior to SMR Oct-2026 Release 1 allows local attackers to read and write out-of-bounds memory.
cve-program ·
Vendor product: Samsung Mobile Devices
CVE-2026-111369Published
ClassroomIO through 1.0.0 Incorrect Authorization via Lesson Update and Delete Routes
cve-program ·
Vendor product: ClassroomIO
CVE-2026-111210Published
bitcoinj Payment Request PaymentSession.java url.openConnection server-side request forgery
cve-program ·
Vendor product: bitcoinj
CVE-2026-111377Published
FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel Reassembly
cve-program ·
Vendor product: FreeRDP
CVE-2026-111382Published
FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 Combine
cve-program ·
Vendor product: FreeRDP
CVE-2026-111387Published
Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List Endpoint
cve-program ·
Vendor product: nezha
CVE-2026-104798Published
My Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute
cve-program ·
Vendor product: My Calendar – Accessible Event Manager
CVE-2026-107659Published
Modula Image Gallery <= 3.0.11 - Missing Authorization to Unauthenticated Sensitive Information Exposure via Exposed 'modulaSettings' REST field on the modula-gallery CPT
cve-program ·
Vendor product: Modula Image Gallery – Photo Grid & Video Gallery
CVE-2026-109221Published
Groundhogg <= 4.9.3 - Authenticated (Sales Representative+) Arbitrary File Deletion via CSV Import 'copy_file' Field Mapping
cve-program ·
Vendor product: Groundhogg — CRM, Newsletters, and Marketing Automation
CVE-2026-89079Published
Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter
cve-program ·
Vendor product: Theme My Login
CVE-2026-12272Published
Lightweight Cookie Notice <= 1.19 - Sensitive Information Exposure via W3TC_DYNAMIC_SECURITY Constant
cve-program ·
Vendor product: Lightweight Cookie Notice – Cookie Banner for Cookie Consent
CVE-2026-111728Published
Seanime v3.10.3 Argument Injection via TranscodeHwAccelCustomSettings
cve-program ·
Vendor product: Seanime
CVE-2026-54657Published
Open Zaak: /zaken/_zoek and /enkelvoudiginformatieobjecten/_zoek endpoints do not filter result lists based on authorizations linked to token
cve-program ·
Vendor product: open-zaak
CVE-2026-57447Published
Discourse Doc Categories: Doc category index refresh leaks private topic titles
cve-program ·
Vendor product: discourse-doc-categories
CVE-2026-77630Published
pupnp: Denial of service via blocking DNS resolution in parse_uri()/GENA callback parsing
cve-program ·
Vendor product: pupnp
CVE-2026-68907Published
libIEC61850: Server-side out-of-bounds stack read in association-specific dynamic dataset creation due to reversed StringUtils_copyStringToBuffer arguments
cve-program ·
Vendor product: libiec61850
CVE-2026-42269Published
countly-server: Path Traversal in delete_import Endpoint Allows Arbitrary File and Directory Deletion
cve-program ·
Vendor product: countly-server
CVE-2026-85985Published
MariaDB: Unauthorized file access via CONNECT engine UDFs
cve-program ·
Vendor product: server
CVE-2026-92877Published
The JAXB factory methods historically relied solely on `FEATURE_SECURE_PROCESSING` to prevent XML External Entity (XXE) resolution. On JAXP implementations where that feature alone does not block external entity resolution, an attacker who …
cve-program ·
Vendor product: jaxb-ri (core)
CVE-2026-85746Published
MariaDB: Out-of-bound buffer write on in `ST_AsText` of nested GeometryCollections
cve-program ·
Vendor product: server
CVE-2026-103502Published
hex_core's default HTTP adapter doesn't verify TLS certificates on OTP 24 and 25
cve-program ·
https://repo.hex.pm: hex_core · https://github.com: hexpm/hex_core
CVE-2026-85748Published
MariaDB: Use-after-free with a large number of SYS_REFCURSOR's
cve-program ·
Vendor product: server
CVE-2026-86008Published
Mailu domain managers can take over higher-privileged accounts
cve-program ·
Vendor product: Mailu
CVE-2026-105283Published
Internal error terms inspected into AshTypescript RPC error responses
cve-program ·
https://repo.hex.pm: ash_typescript · https://github.com: ash-project/ash_typescript
CVE-2026-42270Published
countly-server: Unauthenticated Denial of Service (DoS) via Unhandled Stream Exception
cve-program ·
Vendor product: countly-server
CVE-2026-68908Published
libIEC61850: Oversized RptID can trigger invalid free of a stack-backed visible string in the report send path
cve-program ·
Vendor product: libiec61850
CVE-2026-48503Published
libIEC61850: Remote information disclosure in MMS file service via out-of-range initialPosition in fileOpen followed by fileRead
cve-program ·
Vendor product: libiec61850
CVE-2026-111356Published
MacCMS v10 through 2026.1000.4056 Account Takeover via Password Recovery Brute-Force
cve-program ·
Vendor product: MacCMS
CVE-2026-105412Published
SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5
cve-program ·
Vendor product: Tuleap Enterprise Edition
CVE-2026-111351Published
metasfresh through 5.175 Authorization Bypass via /rest/api/board REST API
cve-program ·
Vendor product: metasfresh
CVE-2026-111346Published
ZenTao PMS through 22.6 Authorization Bypass via action::editComment
cve-program ·
Vendor product: zentaopms
CVE-2026-111331Published
Dokploy through 0.30.8 Cross-Organization Authorization Bypass via port tRPC Router
cve-program ·
Vendor product: Dokploy
CVE-2026-105411Published
Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
cve-program ·
Vendor product: Tuleap Enterprise Edition
CVE-2026-102024Published
Junos OS and Junos OS Evolved: An attacker causes a routing daemon crash when BGP extended-nexthop-tunnel is used
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
CVE-2026-105410Published
Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5
cve-program ·
Vendor product: Tuleap Enterprise Edition
CVE-2026-102023Published
Junos OS Evolved: An attacker causes denial of service via SNMP when firewall counters are used
cve-program ·
Vendor product: Junos OS Evolved
CVE-2026-102022Published
Junos OS and Junos OS Evolved: An attacker causes a routing-process crash when BGP-LS traffic-engineering is enabled
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
CVE-2026-102020Published
Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when BGP-LS TED export is enabled
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
CVE-2026-102025Published
Junos OS and Junos OS Evolved: A BGP route-processing error causes rpd crash when extended next-hop tunneling and SRv6 service processing are used
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
CVE-2026-102026Published
Junos OS and Junos OS Evolved: An attacker causes a routing-daemon crash when BGP RIB sharding is used
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
CVE-2026-21135Published
Improper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to access sensitive information.
cve-program ·
Vendor product: Samsung Internet
CVE-2026-102028Published
Junos OS and Junos OS Evolved: An attacker causes an rpd crash when VPLS auto-discovery is used
cve-program ·
Vendor product: Junos OS · Vendor product: Junos OS Evolved
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.