Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

695680 source statements · aliases may refer to the same vulnerability

CVE-2026-106630Published

Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

cve-program ·

Vendor product: Adobe Experience Manager 6.5 LTS · Vendor product: Adobe Experience Manager 6.5

CVSS 3.1 9.3Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-32205Published

A malicious server can serve excessive amounts of `Set-Cookie:` headers in a HTTP response to curl and curl < 7.84.0 stores all of them. A sufficiently large amount of (big) cookies make subsequent HTTP requests to this, or other servers to…

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-86022Published

VNote: Argument injection to arbitrary command execution via crafted note filename in external-program handling

cve-program ·

Vendor product: vnote

CVSS 3.1 7.0Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110130Published

Dockhand before 1.0.45 Authentication Bypass via Static-Asset Check

cve-program ·

Vendor product: dockhand

CVSS 4.0 10.0 · CVSS 3.1 10.0Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-30115Published

Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL. This mechanism could be bypassed if the host name in the given URL used atrailing do…

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-29824Published

In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf) and tree.c (xmlBuffer) don't check for integer overflows. This can result in out-of-bounds memory writes. Exploitation requires a victim to open a crafted, mult…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-29155Published

In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query. This can occur during an LDAP search operation when the sear…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-28321Published

The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn't correctly restrict login if a user tries to connect from an IP address that is not resolvable via D…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-27943Published

libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-27782Published

libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited reuse.libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse if o…

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110238Published

Rapyd Admin 9.0.0 before 9.20.0 Authorization Bypass via UsersModalEditEmbed Component

cve-program ·

Vendor product: rapyd-admin

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110233Published

rovr through 0.10.3 OS Command Injection via Unquoted Path to cmd.exe

cve-program ·

https://pypi.org: rovr

CVSS 4.0 8.4 · CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-27781Published

libcurl provides the `CURLOPT_CERTINFO` option to allow applications torequest details to be returned about a server's certificate chain.Due to an erroneous function, a malicious server could make libcurl built withNSS get stuck in a never-…

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2014-9323Published

The xdr_status_vector function in Firebird before 2.1.7 and 2.5.x before 2.5.3 SU1 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and crash) via an op_response action with a non-empty sta…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110228Published

wallabag 2.6.13 through 2.6.14 Stored XSS via Failed HTML Import Upload

cve-program ·

Vendor product: wallabag

CVSS 4.0 5.1 · CVSS 3.1 5.4Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2014-7810Published

The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly consider the possibility of an accessible interface implemented by an inaccessible class, which allow…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2014-0459Published

Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2014-0230Published

Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110222Published

Razorpay IFSC Ruby gem through 2.0.62 SSRF via IFSC lookup

cve-program ·

Vendor product: IFSC

CVSS 4.0 6.9 · CVSS 3.1 5.3Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2014-0227Published

java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows r…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110614Published

Yiuman citrus through 0.15.0 ORDER BY SQL Injection via sortBy Parameter

cve-program ·

https://repo.maven.apache.org/maven2: citrus

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2014-0119Published

Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a cra…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-14855Published

RT Mega Menu <= 1.5.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via rtmega_update_menu_options AJAX Action

cve-program ·

Vendor product: RT Mega Menu – Mega Menu Builder for Elementor & Gutenberg

CVSS 3.1 6.4Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2014-0114Published

Apache Commons BeanUtils, as distributed in lib/commons-beanutils-1.8.0.jar in Apache Struts 1.x through 1.3.10 and in other products requiring commons-beanutils through 1.9.2, does not suppress the class property, which allows remote attac…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110609Published

Dromara Skyeye through commit 65d3ddcede70 SQL Injection via keyword Parameter

cve-program ·

https://github.com/dromara/skyeye: skyeye

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-14433Published

Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 - Unauthenticated Stored Cross-Site Scripting via REST API 'business_id' Parameter

cve-program ·

Vendor product: Online Booking & Scheduling Calendar by vcita

CVSS 3.1 7.2Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2014-0099Published

Integer overflow in java/org/apache/tomcat/util/buf/Ascii.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4, when operated behind a reverse proxy, allows remote attackers to conduct HTTP request smuggling attacks …

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-27780Published

The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a different URL usingthe wrong host name when it is later retrieved.For example, a URL like `http://example.co…

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-27778Published

A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`.

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110217Published

vhr through commit 03abbd3 Information Disclosure of Operator Password Hashes via GET /chat/hrs

cve-program ·

Vendor product: vhr

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-27776Published

A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-27775Published

An information disclosure vulnerability exists in curl 7.65.0 to 7.82.0 are vulnerable that by using an IPv6 address that was in the connection pool but with a different zone id it could reuse a connection instead.

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-27774Published

An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacker to extract credentials when follows HTTP(S) redirects is used with authentication could leak crede…

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-26488Published

In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an adminis…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-26373Published

Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

cve-program ·

Vendor product: Intel(R) Processors

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-25315Published

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110604Published

Mini-XML 4.0.0 through 4.0.6 Stack Out-of-Bounds Write via mxml_strtod()

cve-program ·

https://github.com/michaelrsweet/mxml: Mini-XML

CVSS 4.0 2.0 · CVSS 3.1 3.6Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2014-0096Published

java/org/apache/catalina/servlets/DefaultServlet.java in the default servlet in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 does not properly restrict XSLT stylesheets, which allows remote attackers to bypass securi…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2014-0075Published

Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service …

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110212Published

ai-fusion-video through 1.2.0 Path Traversal in Media Upload subDir Parameter

cve-program ·

Vendor product: ai-fusion-video

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110619Published

frp 0.41.0 through 0.71.1 Missing Authentication for pprof Debug Endpoints

cve-program ·

Vendor product: frp

CVSS 4.0 6.3 · CVSS 3.1 4.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-59766Published

Gitea's starred-repository and tracked-time API endpoints do not re-check current repository permissions before returning data associated with the requesting user. A user whose access to a private repository has been revoked can still retri…

nvd ·

CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary 4.3Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2026-110599Published

L-SMASH through 2.14.5 Double Free in HEVC and H.264 Importer Probe

cve-program ·

https://github.com: l-smash

CVSS 4.0 6.9 · CVSS 3.1 7.1Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-88838Published

Busybox: busybox: non-root mount option filter bypass allows clearing fstab security restrictions

cve-program ·

https://access.redhat.com/downloads/content/package-browser/: busybox

CVSS 3.1 5.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-25314Published

In Expat (aka libexpat) before 2.4.5, there is an integer overflow in copyString.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110624Published

Papermerge Core through 3.5.3 Missing Authorization via /tags/all and /document-types/all

cve-program ·

https://github.com/papermerge/papermerge-core: papermerge-core

CVSS 4.0 2.3 · CVSS 3.1 3.1Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2025-49652Published

Improper access control allows arbitrary account creation

cve-program ·

Vendor product: BackendAI

CVSS 3.1 9.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110263Published

OW2 ASM 3.0 before 9.11 Uncontrolled Recursion in SignatureReader

cve-program ·

https://repo1.maven.org/maven2/: ASM

CVSS 4.0 6.8 · CVSS 3.1 5.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-25313Published

In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110258Published

OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions

cve-program ·

https://repo1.maven.org/maven2/: ASM

CVSS 4.0 6.8 · CVSS 3.1 5.5Source modified 14 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.