Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

695210 source statements · aliases may refer to the same vulnerability

CVE-2023-38408Published

The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe fo…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-37453Published

An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-36660Published

The OCB feature in libnettle in Nettle 3.9 before 3.9.1 allows memory corruption.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-35945Published

Envoy vulnerable to HTTP/2 memory leak in nghttp2 codec

cve-program ·

Vendor product: envoy

CVSS 3.1 7.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-35827Published

An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-35001Published

Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability

cve-program ·

Vendor product: Linux Kernel

CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-97287Published

WordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerability

cve-program ·

https://wordpress.org/plugins: event-tickets

CVSS 3.1 8.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-34969Published

D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-34319Published

Linux: buffer overrun in netback due to unusual packet

cve-program ·

Vendor product: Linux

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-32665Published

Gvariant deserialisation does not match spec for non-normal data

cve-program ·

Vendor product: glib2 · https://access.redhat.com/downloads/content/package-browser/: glib2 · https://access.redhat.com/downloads/content/package-browser/: glib2

CVSS 3.1 5.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-32643Published

A flaw was found in GLib. The GVariant deserialization code is vulnerable to a heap buffer overflow introduced by the fix for CVE-2023-32665. This bug does not affect any released version of GLib, but does affect GLib distributors who follo…

cve-program ·

Vendor product: glib

CVSS 3.1 5.3Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-32636Published

A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499. The offset table validation may be very slow. This bug does no…

cve-program ·

Vendor product: glib

CVSS 3.1 4.7Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-32611Published

G_variant_byteswap() can take a long time with some non-normal inputs

cve-program ·

Vendor product: glib2 · https://access.redhat.com/downloads/content/package-browser/: glib2 · https://access.redhat.com/downloads/content/package-browser/: glib2

CVSS 3.1 5.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-32233Published

In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. Th…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-73016Published

DirectWrite Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 8.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-31436Published

qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-70583Published

Windows Core Messaging Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-69781Published

Windows DHCP Client Denial of Service Vulnerability

cve-program ·

Vendor product: Windows 11 Version 24H2 · Vendor product: Windows 11 Version 25H2 · Vendor product: Windows 11 version 26H1

CVSS 3.1 6.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-69478Published

Windows Device Association Service Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-69360Published

Microsoft Office Word Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 8.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-69283Published

Windows CD-ROM Driver Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-69284Published

Windows DCOM Server Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-69265Published

Windows NTFS Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-31085Published

An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in do_div(sz,mtd->erasesize), used indirectly by ctrl_cdev_ioctl, when mtd->erasesize is 0.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-72948Published

Windows DNS Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows Server 2012

CVSS 3.1 6.7Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-71339Published

Windows Installer Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 6.7Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-69732Published

Windows Link Layer Topology Discovery Protocol Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 8.1Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-69623Published

Windows HTTP Print Provider Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 8.0Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-69473Published

Windows Kernel Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.0Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-69423Published

Windows USB Video Driver Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 8.0Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-69415Published

Windows DHCP Server Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows Server 2012

CVSS 3.1 6.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-68875Published

Windows NTFS Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-68833Published

Windows NTFS Remote Code Execution Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 6.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-29499Published

Gvariant offset table entry size is not checked in is_normal()

cve-program ·

Vendor product: glib2 · https://access.redhat.com/downloads/content/package-browser/: glib2 · https://access.redhat.com/downloads/content/package-browser/: glib2

CVSS 3.1 5.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-29491Published

ncurses before 6.4 20230408, when used by a setuid application, allows local users to trigger security-relevant memory corruption via malformed data in a terminfo database file that is found in $HOME/.terminfo or reached via the TERMINFO or…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-29469Published

An issue was discovered in libxml2 before 2.10.4. When hashing empty dict strings in a crafted XML document, xmlDictComputeFastKey in dict.c can produce non-deterministic values, leading to various logic and memory errors, such as a double …

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-103869Published

Pulp-ansible: bearer tokens are reused across remotes in a worker

cve-program ·

https://access.redhat.com/downloads/content/package-browser/: ansible-automation-platform-24/hub-rhel8 · https://access.redhat.com/downloads/content/package-browser/: ansible-automation-platform-25/hub-rhel8 · https://access.redhat.com/downloads/content/package-browser/: ansible-automation-platform-26/hub-rhel9

CVSS 3.1 6.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-103868Published

Pulp-container: registry credentials are reused across remotes in a worker

cve-program ·

CVSS 3.1 6.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-29383Published

In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to exploit this directly (e.g., adding a new user fails because \n is in the block list),…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-28746Published

Information exposure through microarchitectural state after transient execution from some register files for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

cve-program ·

Vendor product: Intel(R) Atom(R) Processors

CVSS 3.1 6.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-28531Published

ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-28484Published

In libxml2 before 2.10.4, parsing of certain invalid XSD schemas can lead to a NULL pointer dereference and subsequently a segfault. This occurs in xmlSchemaFixupComplexType in xmlschemas.c.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-27538Published

An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool o…

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-27536Published

An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELE…

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-27535Published

An authentication bypass vulnerability exists in libcurl <8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool fo…

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-27534Published

A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate…

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-27533Published

A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation. The lack of proper input s…

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-27371Published

GNU libmicrohttpd before 0.9.76 allows remote DoS (Denial of Service) due to improper parsing of a multipart/form-data boundary in the postprocessor.c MHD_create_post_processor() method. This allows an attacker to remotely send a malicious …

cve-program ·

Vendor product: n/a

CVSS 3.1 5.9Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-26607Published

In the Linux kernel 6.0.8, there is an out-of-bounds read in ntfs_attr_find in fs/ntfs/attrib.c.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-26604Published

systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which the "systemctl status" command may be executed. Specifically, systemd does not set LESSSECURE to 1,…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.