Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

695210 source statements · aliases may refer to the same vulnerability

CVE-2023-52464Published

EDAC/thunderx: Fix possible out-of-bounds string access

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2023-52458Published

block: add check that partition length needs to be aligned with block size

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2023-52447Published

bpf: Defer the free of inner map when necessary

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2023-52444Published

f2fs: fix to avoid dirent corruption

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.8Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2023-52426Published

libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2023-52425Published

libexpat through 2.5.0 allows a denial of service (resource consumption) because many full reparsings are required in the case of a large token for which multiple buffer fills are needed.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2023-51767Published

OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is a…

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2023-51385Published

In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have …

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-105846Published

Payload is a free and open source headless content management system. In versions from 3.40.0 before 3.88.0 and canary versions before 4.0.0-canary.27, an attacker can craft a redirect URL parameter that sends a guest user to an untrusted d…

nvd ·

CVSS 3.1 · [email protected] · Secondary 6.1Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-105847Published

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, a user who can query a collection with a polymorphic join to sensitive fields can infer h…

nvd ·

CVSS 4.0 · [email protected] · Secondary 7.1 · CVSS 3.1 · [email protected] · Primary 6.5Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-105868Published

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, local upload configurations that accept XML files can store an XML file and stylesheet that execute …

nvd ·

CVSS 4.0 · [email protected] · Secondary 8.6 · CVSS 3.1 · [email protected] · Primary 7.1Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-105848Published

Payload is a free and open source headless content management system. In @payloadcms/plugin-stripe versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user who can reach the enabled optional Stripe REST proxy…

nvd ·

CVSS 4.0 · [email protected] · Secondary 6.4 · CVSS 3.1 · [email protected] · Primary 9.6Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-105849Published

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, users with ordinary read access to other authentication documents in a collection with us…

nvd ·

CVSS 4.0 · [email protected] · Secondary 7.7 · CVSS 3.1 · [email protected] · Primary 8.3Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2023-51384Published

In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS#11-hosted private keys, these constraints are only applied to the first key,…

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-105850Published

Payload is a free and open source headless content management system. In @payloadcms/plugin-ecommerce versions before 3.90.0 and canary versions before 4.0.0-canary.34, use of the Stripe payment adapter can allow a Stripe order confirmation…

nvd ·

CVSS 4.0 · [email protected] · Secondary 8.8 · CVSS 3.1 · [email protected] · Primary 8.2Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-105852Published

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, querying a readable collection with a relationship to another collection can expose information abou…

nvd ·

CVSS 4.0 · [email protected] · Secondary 6.9 · CVSS 3.1 · [email protected] · Primary 7.5Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-105853Published

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, token refresh responses and password reset responses can independently return hidden or r…

nvd ·

CVSS 4.0 · [email protected] · Secondary 7.1 · CVSS 3.1 · [email protected] · Primary 6.5Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-105854Published

Payload is a free and open source headless content management system. In versions from 3.0.0 before 3.90.0 and canary versions before 4.0.0-canary.34, a malformed multipart request body can cause multipart Content-Type processing to take an…

nvd ·

CVSS 4.0 · [email protected] · Secondary 8.7 · CVSS 3.1 · [email protected] · Primary 7.5Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-105855Published

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, the server fails to enforce a field-level access.update restriction on the password field of an auth…

nvd ·

CVSS 4.0 · [email protected] · Secondary 7.6 · CVSS 3.1 · [email protected] · Primary 7.1Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-105856Published

Payload is a free and open source headless content management system. Prior to 3.90.0 and 4.0.0-canary.34, an attacker with read and create or update access to a collection containing a json field or a blocks field with blocksAsJSON enabled…

nvd ·

CVSS 4.0 · [email protected] · Secondary 8.6 · CVSS 3.1 · [email protected] · Primary 8.3Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-105857Published

Payload is a free and open source headless content management system. In @payloadcms/plugin-form-builder versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can craft a form submission that executes code remotely …

nvd ·

CVSS 3.1 · [email protected] · Secondary 10.0Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-105858Published

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a crafted request to the public first-register operation can execute code remotely when local authen…

nvd ·

CVSS 3.1 · [email protected] · Secondary 8.1Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-105859Published

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an attacker can submit a request to a specific update endpoint that modifies collection documents wi…

nvd ·

CVSS 3.1 · [email protected] · Secondary 9.8Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-105860Published

Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, the default tenant array field access allows an authenticated user t…

nvd ·

CVSS 4.0 · [email protected] · Secondary 7.1 · CVSS 3.1 · [email protected] · Primary 7.1Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-105861Published

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that was not veri…

nvd ·

CVSS 4.0 · [email protected] · Secondary 7.2 · CVSS 3.1 · [email protected] · Primary 8.2Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-105862Published

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, a collection that allows downloadable SVG uploads can store a malicious SVG that bypasses sanitizati…

nvd ·

CVSS 3.1 · [email protected] · Secondary 8.7Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-105863Published

Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, a custom field option that maps a field to a reserved authentication claim name can place unintended values in the authenticati…

nvd ·

CVSS 4.0 · [email protected] · Secondary 9.2 · CVSS 3.1 · [email protected] · Primary 9.4Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2023-50781Published

M2crypto: bleichenbacher timing attacks in the rsa decryption api - incomplete fix for cve-2020-25657

cve-program ·

https://gitlab.com/m2crypto/m2crypto: m2crypto · https://access.redhat.com/downloads/content/package-browser/: m2crypto · https://access.redhat.com/downloads/content/package-browser/: m2crypto

CVSS 3.1 7.5Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2023-50495Published

NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-105864Published

Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user limited to one tenant can create a record in a…

nvd ·

CVSS 4.0 · [email protected] · Secondary 5.3 · CVSS 3.1 · [email protected] · Primary 4.3Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2023-48795Published

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and …

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2026-105865Published

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user who can update or delete uploads stored locally can cause file cleanup to remo…

nvd ·

CVSS 3.1 · [email protected] · Secondary 8.1Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-105866Published

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an unauthenticated attacker who knows an account email address or username can abuse the account loc…

nvd ·

CVSS 4.0 · [email protected] · Secondary 6.9 · CVSS 3.1 · [email protected] · Primary 7.5Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-105867Published

Payload is a free and open source headless content management system. In @payloadcms/storage-s3 versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user can overwrite an existing S3 object belonging to anothe…

nvd ·

CVSS 4.0 · [email protected] · Secondary 7.1 · CVSS 3.1 · [email protected] · Primary 6.5Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2026-106100Published

Payload is a free and open source headless content management system. In @payloadcms/db-mongodb versions before 3.87.0 and canary versions before 4.0.0-canary.20, an authenticated user who can update a document can modify fields that field-…

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.1Source modified 15 Oct 2026Recorded 25 Oct 2026

CVE-2023-47233Published

The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the USB by hotplug) code. For physically proximate attackers with local access, this "could be exploi…

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2023-46862Published

An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an io_uring/fdinfo.c io_uring_show_fdinfo NULL pointer dereference can occur.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2023-46219Published

When saving HSTS data to an excessively long file name, curl could end up

cve-program ·

Vendor product: curl

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2023-46218Published

This flaw allows a malicious HTTP server to set "super cookies" in curl that

cve-program ·

Vendor product: curl

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2023-45898Published

The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2023-45871Published

An issue was discovered in drivers/net/ethernet/intel/igb/igb_main.c in the IGB driver in the Linux kernel before 6.5.3. A buffer size may not be adequate for frames larger than the MTU.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2023-45863Published

An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a race condition that results in a fill_kobj_path out-of-bounds write.

cve-program ·

Vendor product: n/a

Source modified 15 Oct 2026Recorded 23 Oct 2026

CVE-2023-45853Published

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-45322Published

libxml2 through 2.11.5 has a use-after-free that can only occur after a certain memory allocation fails. This occurs in xmlUnlinkNode in tree.c. NOTE: the vendor's position is "I don't think these issues are critical enough to warrant a CVE…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-44487Published

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-40283Published

An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-39615Published

Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-39128Published

GNU gdb (GDB) 13.0.50.20220805-git was discovered to contain a stack overflow via the function ada_decode at /gdb/ada-lang.c.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-38546Published

This flaw allows an attacker to insert cookies at will into a running program

cve-program ·

Vendor product: curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-38545Published

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy

cve-program ·

Vendor product: curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.