Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

694901 source statements · aliases may refer to the same vulnerability

CVE-2026-105274Published

hex_core decompresses registry and Erlang term API responses without size limits

cve-program ·

Vendor product: rebar3 · https://github.com: erlang/rebar3 · https://repo.hex.pm: hex_core

CVSS 4.0 2.1Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-85975Published

Cleartext transmission in Progress MarkLogic Server Amazon S3 connections

cve-program ·

Vendor product: MarkLogic Server

CVSS 3.1 7.5Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-6232Published

Out-of-bounds write in LR11xx Transceiver

cve-program ·

Vendor product: LR1110 Transceiver · Vendor product: LR1110 Modem-e · Vendor product: LR1120 Transceiver

CVSS 4.0 5.2Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-108082Published

Symfony: ReDoS in HeaderUtils::split() Reachable Through the Cache-Control Request Header

cve-program ·

https://packagist.org/packages/symfony/http-foundation: symfony/http-foundation

CVSS 4.0 8.7Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-79841Published

HPE NonStop RDMA SERVICES NSK - Out-of-bounds memory write vulnerability

cve-program ·

Vendor product: HPE NonStop RDMA SERVICES NSK

CVSS 3.1 5.8Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-45450Published

Unitronics - CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

cve-program ·

Vendor product: Unitronics UniStream Pro/UniLogic

CVSS 3.1 8.3Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-108175Published

WordPress MDTF plugin <= 1.4.0 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: wp-meta-data-filter-and-taxonomy-filter

CVSS 3.1 6.5Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-45451Published

Unitronics - CWE-287: Improper Authentication

cve-program ·

Vendor product: Unitronics UniStream Pro/UniLogic

CVSS 3.1 8.3Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-45452Published

Unitronics - CWE-134 Use of Externally-Controlled format string

cve-program ·

Vendor product: Unitronics UniStream Pro/UniLogic

CVSS 3.1 8.3Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-110371Published

WordPress Strong Testimonials plugin <= 3.3.12 - Broken Access Control vulnerability

cve-program ·

https://wordpress.org/plugins: strong-testimonials

CVSS 3.1 4.3Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-103509Published

Credential Disclosure in P4 Search Configuration API

cve-program ·

Vendor product: P4Search

CVSS 4.0 8.5Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-57569Published

Lychee: Distinct post-fix SSRF variant in Photo::fromUrl due to missing IP pinning after DNS-based validation

cve-program ·

Vendor product: Lychee

CVSS 4.0 2.3Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-77466Published

Lychee: Webshop payment bypass via unrestricted "Dummy" gateway selection

cve-program ·

Vendor product: Lychee

CVSS 4.0 8.3Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-108039Published

Apache CXF: Prevent unbounded XML document size in StaxUtils by adding default element and character limits

cve-program ·

https://repo.maven.apache.org/maven2: org.apache.cxf:cxf-core

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-95180Published

An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application components via incorrect access control in the handling of intent:// URLS in Defa…

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-100409Published

OpenNext Cloudflare: Cache interception can bypass middleware protection for encoded paths

cve-program ·

Vendor product: opennextjs-cloudflare

CVSS 3.1 7.5Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-107938Published

Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification.

cve-program ·

https://repo.maven.apache.org/maven2: org.apache.cxf:cxf-rt-transports-http-netty-client

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-55467Published

CUPS fax option values bypass the CVE-2026-34980 control-character sanitizer (incomplete fix)

cve-program ·

Vendor product: cups

CVSS 3.1 2.5Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-55875Published

Helium: SSRF via External Calendar URL Allows Authenticated Users to Probe Internal Network

cve-program ·

Vendor product: platform

CVSS 3.1 4.3Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-107937Published

Apache CXF: The attachment header size and count limits can be bypassed, which allows denial of service through memory exhaustion.

cve-program ·

https://repo.maven.apache.org/maven2: org.apache.cxf:cxf-core

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-8014Published

The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, 7.0.41 to 7.0.88 are insecure and enable 'supportsCredentials' for all origins. It is expected that users of the CO…

cve-program ·

Vendor product: Apache Tomcat

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-7489Published

FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending mal…

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-2811Published

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install). Supported versions that are affected are Java SE: 8u162 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastru…

cve-program ·

Vendor product: Java

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-100227Published

Apache CXF: XML Signature wrapping in JAX-RS XML Security

cve-program ·

https://repo.maven.apache.org/maven2: org.apache.cxf:cxf-rt-rs-security-xml

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-20786Published

libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-20406Published

Modules/_pickle.c in Python before 3.7.1 has an integer overflow via a large LONG_BINPUT value that is mishandled during a "resize to twice the size" attempt. This issue might cause memory exhaustion, but is only relevant if the pickle form…

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-19876Published

cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free(): invalid pointer" error.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-19857Published

The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magic cookies in CAF files, because a ReadKukiChunk() cast converts a return value to an unsigned int ev…

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-19543Published

An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode in libjasper/jp2/jp2_dec.c.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-19542Published

An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/jp2/jp2_dec.c, leading to a denial of service.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-19541Published

An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28…

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-19540Published

An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900.21, 1.900.22, 1.900.23, 1.900.24, 1.900.25, 1.900.26, 1.900.27, 1.900.28…

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-19539Published

An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/base/jas_image.c, leading to a denial of service.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-19517Published

An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memset call, as demonstrated by sadf.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-19416Published

An issue was discovered in sysstat 12.1.1. The remap_struct function in sa_common.c has an out-of-bounds read during a memmove call, as demonstrated by sadf.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-19362Published

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-19361Published

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-19360Published

FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-19139Published

An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getparms in jpc_cs.c.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-18700Published

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions d_name(), d_encoding(), and d_local_name() in cp-d…

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-18091Published

Use after free in Kernel Mode Driver in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.63…

cve-program ·

Vendor product: Intel(R) Graphics Driver for Windows

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-18090Published

Out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 …

cve-program ·

Vendor product: Intel(R) Graphics Driver for Windows

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-18089Published

Multiple out of bounds read in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.…

cve-program ·

Vendor product: Intel(R) Graphics Driver for Windows

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-17828Published

Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-14721Published

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-14720Published

FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-1305Published

Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a Servlet had been loaded. Because security constraints defined in t…

cve-program ·

Vendor product: Apache Tomcat

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-97791Published

Apache CXF: STSTokenValidator can accept untrusted SAML assertions because it shares validation state between requests

cve-program ·

https://repo.maven.apache.org/maven2: org.apache.cxf:cxf-rt-ws-security

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-1304Published

The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of a security constrain…

cve-program ·

Vendor product: Apache Tomcat

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2018-12224Published

Buffer leakage in igdkm64.sys in Intel(R) Graphics Driver for Windows* before versions 10.18.x.5059 (aka 15.33.x.5059), 10.18.x.5057 (aka 15.36.x.5057), 20.19.x.5063 (aka 15.40.x.5063) 21.20.x.5064 (aka 15.45.x.5064) and 24.20.100.6373 may …

cve-program ·

Vendor product: Intel(R) Graphics Driver for Windows

Source modified 15 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.