Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

695613 source statements · aliases may refer to the same vulnerability

CVE-2026-103297Published

CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)

cve-program ·

Vendor product: Content Credentials Rust SDK · Vendor product: C2PA Tool · Vendor product: Content Credentials JS SDK

CVSS 3.1 7.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-102502Published

CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)

cve-program ·

Vendor product: Content Credentials Rust SDK · Vendor product: C2PA Tool · Vendor product: Content Credentials JS SDK

CVSS 3.1 5.3Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-43945Published

The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) …

cve-program ·

Vendor product: linux_kernel

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-43750Published

drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-104345Published

CAI Content Credentials | Improper Input Validation (CWE-20)

cve-program ·

Vendor product: Content Credentials Rust SDK · Vendor product: C2PA Tool · Vendor product: Content Credentials JS SDK

CVSS 3.1 7.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-100136Published

CAI Content Credentials | Integer Overflow or Wraparound (CWE-190)

cve-program ·

Vendor product: Content Credentials Rust SDK · Vendor product: C2PA Tool · Vendor product: Content Credentials JS SDK

CVSS 3.1 7.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-95632Published

CAI Content Credentials | Improper Verification of Cryptographic Signature (CWE-347)

cve-program ·

Vendor product: Content Credentials Rust SDK · Vendor product: C2PA Tool · Vendor product: Content Credentials JS SDK

CVSS 3.1 7.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-84420Published

Out-of-Bounds Write and Out-of-Bounds Read

cve-program ·

Vendor product: Citrix Workspace app for Windows

CVSS 4.0 5.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-43680Published

In libexpat through 2.4.9, there is a use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate in out-of-memory situations.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-43552Published

A use after free vulnerability exists in curl <7.87.0. Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the s…

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-43551Published

A vulnerability exists in curl <7.87.0 HSTS check that could be bypassed to trick it to keep using HTTP. Using its HSTS support, curl can be instructed to use HTTPS instead of using an insecure clear-text HTTP step even when HTTP is provide…

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-42916Published

In curl before 7.86.0, the HSTS check could be bypassed to trick it into staying with HTTP. Using its HSTS support, curl can be instructed to use HTTPS directly (instead of using an insecure cleartext HTTP step) even when HTTP is provided i…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-42915Published

curl before 7.86.0 has a double free. If curl is told to use an HTTP proxy for a transfer with a non-HTTP(S) URL, it sets up the connection to the remote server by issuing a CONNECT request to the proxy, and then tunnels the rest of the pro…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-42898Published

PAC parsing in MIT Kerberos 5 (aka krb5) before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution (in KDC, kadmind, or a GSS or Kerberos application server) on 32-bit platforms (which have a result…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-42896Published

Info Leak in l2cap_core in the Linux Kernel

cve-program ·

Vendor product: kernel

CVSS 3.1 8.0Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-42895Published

Info Leak in l2cap_core in the Linux Kernel

cve-program ·

Vendor product: kernel

CVSS 3.1 5.1Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-53612Published

util-linux mount hook_owner TOCTOU allows local privilege escalation

cve-program ·

Vendor product: util-linux

CVSS 3.1 7.0Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-42722Published

In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service attack against the beacon protection of P2P devices.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-42721Published

A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-42720Published

Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentially…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-42719Published

A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-42703Published

mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-103423Published

Booking Package <= 1.7.29 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'mode=sendBooking' with nonexistent 'timeKey' and 'public=0'

cve-program ·

Vendor product: Booking Package

CVSS 3.1 7.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-53563Published

Persistent Command Execution

cve-program ·

Vendor product: UniconOS

CVSS 4.0 6.9Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-102007Published

Bit integrations <= 2.10.6 - Unauthenticated Stored Cross-Site Scripting via 'notification_content' Field via Public Bit Assist Webhook Callback

cve-program ·

Vendor product: Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation

CVSS 3.1 7.2Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-97657Published

Abandoned Cart Pro for WooCommerce <= 10.8.0 - Unauthenticated Authentication Bypass via Malleable Encryption and Bypassable HMAC via Recovery Link 'validate' Parameter

cve-program ·

Vendor product: Abandoned Cart Pro for WooCommerce

CVSS 3.1 9.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-78193Published

JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated SQL Injection

cve-program ·

Vendor product: JTL-Connector for WooCommerce

CVSS 3.1 7.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-42432Published

This vulnerability allows local attackers to disclose sensitive information on affected installations of the Linux Kernel 6.0-rc2. An attacker must first obtain the ability to execute high-privileged code on the target system in order to ex…

cve-program ·

Vendor product: Kernel

CVSS 3.0 5.1Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-42329Published

Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might …

cve-program ·

Vendor product: Linux

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-53564Published

Arbitrary file read and write

cve-program ·

Vendor product: UniconOS

CVSS 4.0 5.1Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-101924Published

NewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via 'urlrequested' Attribute via Query String

cve-program ·

Vendor product: NewStatPress

CVSS 3.1 7.2Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110647Published

Turnpress through 0.4.2 OS Command Injection via Crafted .docx File Names

cve-program ·

https://www.npmjs.com: turnpress

CVSS 4.0 8.5 · CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-104995Published

BP Profile Search <= 5.9 - Unauthenticated Local File Inclusion to Remote Code Execution via 'bps_directory' Cookie 'ajax_template' Value

cve-program ·

Vendor product: BP Profile Search

CVSS 3.1 8.1Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110642Published

xhtml2pdf before 0.2.19 OS Command Injection via startViewer File Name

cve-program ·

https://pypi.org: xhtml2pdf

CVSS 4.0 8.5 · CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-42328Published

Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might …

cve-program ·

Vendor product: Linux

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-35737Published

SQLite 1.0.12 through 3.39.x before 3.39.2 sometimes allows an array-bounds overflow if billions of bytes are used in a string argument to a C API.

nvd ·

CVSS 3.1 · [email protected] · Primary 7.5 · CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary 7.5Source modified 14 Oct 2026Recorded 24 Oct 2026

CVE-2026-110637Published

buildebooks before 0.2.2 OS Command Injection via kindlegen EPUB File Name

cve-program ·

https://www.npmjs.com/package/buildebooks: buildebooks

CVSS 4.0 8.5 · CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110632Published

Report One MyReport Updater through 2.1.1 Unauthenticated gRPC Service RCE

cve-program ·

Vendor product: MyReport Updater

CVSS 4.0 9.2 · CVSS 3.1 8.1Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110627Published

ClipBucket v5 through 5.5.3-#206 Reflected XSS via add_todo val Parameter

cve-program ·

https://github.com: clipbucket-v5

CVSS 4.0 2.1 · CVSS 3.1 4.7Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-41850Published

roccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in certain situations where a report is received while copying a report->value is in progress.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-41849Published

drivers/video/fbdev/smscufx.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a USB device while calling open(), aka a race condition between ufx_ops_open and …

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-41674Published

An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211_bss_info_update function in net/mac80211/scan.c.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-41222Published

mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-88964Published

An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disclosure via crafted domain search options

cve-program ·

Vendor product: OpenVPN

CVSS 4.0 7.1Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-15468Published

Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.

cve-program ·

Vendor product: Passwordless

CVSS 4.0 6.9Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-105390Published

Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresp…

cve-program ·

Vendor product: ovpn-dco-win

CVSS 4.0 6.9Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110622Published

Papermerge Core through 3.5.3 Missing Authorization in Page Management and OCR Endpoints

cve-program ·

https://github.com/papermerge/papermerge-core: papermerge-core

CVSS 4.0 7.7 · CVSS 3.1 7.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-92817Published

Inductive Automation Ignition Software Incorrect Authorization

cve-program ·

Vendor product: Ignition

CVSS 3.1 8.8 · CVSS 4.0 8.7Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-46449Published

The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation vulnerability within the wapptunneld component. The vulnerability is caused by a lack of input validation when the service uses netw…

cve-program ·

Vendor product: Guardicore Platform Agent

CVSS 3.1 6.7Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-41218Published

In drivers/media/dvb-core/dmxdev.c in the Linux kernel through 5.19.10, there is a use-after-free caused by refcount races, affecting dvb_demux_open and dvb_dmxdev_release.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.