Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

695210 source statements · aliases may refer to the same vulnerability

CVE-2023-25139Published

sprintf in the GNU C Library (glibc) 2.37 has a buffer overflow (out-of-bounds write) in some situations with a correct buffer size. This is unrelated to CWE-676. It may write beyond the bounds of the destination buffer when attempting to w…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-25136Published

OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to …

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-24329Published

An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank characters.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-23916Published

An allocation of resources without limits or throttling vulnerability exists in curl <v7.88.0 based on the "chained" HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with different…

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-23915Published

A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality to behave incorrectly when multiple URLs are requested in parallel. Using its HSTS support, curl can be instructed t…

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-23914Published

A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead …

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-23559Published

In rndis_query_oid in drivers/net/wireless/rndis_wlan.c in the Linux kernel through 6.1.5, there is an integer overflow in an addition.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

MAL-2026-14300Published

Malicious code in eth-react-provider (npm)

osv · GHSA-rr86-r66c-qc54

npm: eth-react-provider

Source modified 14 Oct 2026Recorded 24 Oct 2026

MAL-2026-14426Published

Malicious code in babel-polyfill-plugin-corejs2 (npm)

osv · GHSA-9g6r-83hw-6cq2

npm: babel-polyfill-plugin-corejs2

Source modified 14 Oct 2026Recorded 24 Oct 2026

CVE-2023-23455Published

atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classific…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-105627Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

cve-program ·

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-106006Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

cve-program ·

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-106068Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

cve-program ·

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-106485Rejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

cve-program ·

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-23454Published

cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rat…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-7104Published

SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow

cve-program ·

Vendor product: SQLite3

CVSS 3.1 5.5 · CVSS 3.0 5.5 · CVSS 2.0 5.2Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-6932Published

Use-after-free in Linux kernel's ipv4: igmp component

cve-program ·

Vendor product: kernel

CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-6931Published

Out-of-bounds write in Linux kernel's Performance Events system component

cve-program ·

Vendor product: kernel

CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-6817Published

Use-after-free in Linux kernel's netfilter: nf_tables component

cve-program ·

Vendor product: kernel

CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-6780Published

Glibc: integer overflow in __vsyslog_internal()

cve-program ·

Vendor product: glibc · https://access.redhat.com/downloads/content/package-browser/: compat-glibc · https://access.redhat.com/downloads/content/package-browser/: glibc

CVSS 3.1 5.3Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-6779Published

Glibc: off-by-one heap-based buffer overflow in __vsyslog_internal()

cve-program ·

Vendor product: glibc · https://access.redhat.com/downloads/content/package-browser/: compat-glibc · https://access.redhat.com/downloads/content/package-browser/: glibc

CVSS 3.1 8.2Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-6246Published

Glibc: heap-based buffer overflow in __vsyslog_internal()

cve-program ·

Vendor product: glibc · https://access.redhat.com/downloads/content/package-browser/: compat-glibc · https://access.redhat.com/downloads/content/package-browser/: glibc

CVSS 3.1 8.4Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-6237Published

Excessive time spent checking invalid RSA public keys

cve-program ·

Vendor product: OpenSSL

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-6129Published

POLY1305 MAC implementation corrupts vector registers on PowerPC

cve-program ·

Vendor product: OpenSSL

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2025-14284Published

Versions of the package @tiptap/extension-link before 2.10.4 are vulnerable to Cross-site Scripting (XSS) due to unsanitized user input allowed in setting or toggling links. An attacker can execute arbitrary JavaScript code in the context o…

nvd ·

CVSS 4.0 · [email protected] · Secondary 2.0 · CVSS 3.1 · [email protected] · Secondary 6.1Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2025-65964Published

n8n is an open source workflow automation platform. Versions 0.123.1 through 1.119.1 do not have adequate protections to prevent RCE through the project's pre-commit hooks. The Add Config operation allows workflows to set arbitrary Git conf…

nvd ·

CVSS 4.0 · [email protected] · Secondary 9.4 · CVSS 3.1 · [email protected] · Primary 8.8Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2025-66490Published

Traefik is an HTTP reverse proxy and load balancer. For versions prior to 2.11.32 and 2.11.31 through 3.6.2, requests using PathPrefix, Path or PathRegex matchers can bypass path normalization. When Traefik uses path-based routing, requests…

nvd ·

CVSS 4.0 · [email protected] · Secondary 6.9 · CVSS 3.1 · [email protected] · Primary 6.5Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2025-66491Published

Traefik is an HTTP reverse proxy and load balancer. Versions 3.5.0 through 3.6.2 have inverted TLS verification logic in the nginx.ingress.kubernetes.io/proxy-ssl-verify annotation. Setting the annotation to "on" (intending to enable backen…

nvd ·

CVSS 3.1 · [email protected] · Secondary 5.9Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2023-5717Published

Out-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) component

cve-program ·

Vendor product: kernel

CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-5678Published

Excessive time spent in DH check / generation with large Q parameter value

cve-program ·

Vendor product: OpenSSL

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-5363Published

Incorrect cipher key & IV length processing

cve-program ·

Vendor product: OpenSSL

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-4921Published

Use-after-free in Linux kernel's net/sched: sch_qfq component

cve-program ·

Vendor product: kernel

CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-4807Published

POLY1305 MAC implementation corrupts XMM registers on Windows

cve-program ·

Vendor product: OpenSSL

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-4623Published

Use-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component

cve-program ·

Vendor product: kernel

CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2015-8126Published

Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to c…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2015-7575Published

Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which …

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2015-6117Published

Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass intended Access Control Policy restrictions and conduct cross-site scripting (XSS) attacks by modifying a webpart, aka "Micro…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2015-6093Published

Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, Office Web Apps 2010 SP2, and Office Web Apps Server 2013 SP1 allow remote at…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2015-5351Published

The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before 9.0.0.M2 establish sessions and send CSRF tokens for arbitrary new requests, which allows remote attackers to bypass a C…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2015-5346Published

Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments of multiple versions of the same web application, might allow remote att…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2015-5345Published

The Mapper component in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.68, 8.x before 8.0.30, and 9.x before 9.0.0.M2 processes redirects before considering security constraints and Filters, which allows remote attackers to determine the e…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2015-5174Published

Directory traversal vulnerability in RequestUtil.java in Apache Tomcat 6.x before 6.0.45, 7.x before 7.0.65, and 8.x before 8.0.27 allows remote authenticated users to bypass intended SecurityManager restrictions and list a parent directory…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2015-4911Published

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2015-4903Published

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to RMI.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2015-4893Published

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2015-4883Published

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2015-4882Published

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect availability via vectors related to CORBA.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2015-4881Published

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-20…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2015-4872Published

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect integrity via unknown vectors related to Security.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2015-4860Published

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.