Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

695687 source statements · aliases may refer to the same vulnerability

CVE-2026-25946Published

Gitea OpenID discovery server-side request forgery

cve-program ·

Vendor product: code.gitea.io/gitea

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110119Published

yshopmall through 2.0.0 IDOR via Member Address API in UserAddressController

cve-program ·

Vendor product: yshopmall

CVSS 4.0 7.1 · CVSS 3.1 7.1Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-23308Published

valid.c in libxml2 before 2.9.13 has a use-after-free of ID and IDREF attributes.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110114Published

oms-erp through PRE Missing Authentication via skyer-goods es-test Endpoints

cve-program ·

Vendor product: oms-erp

CVSS 4.0 6.9 · CVSS 3.1 6.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110107Published

RuoYi-Cloud-Plus through 6.0.0 IDOR via DELETE /auth/unlock/{socialId}

cve-program ·

Vendor product: RuoYi-Cloud-Plus

CVSS 4.0 2.3 · CVSS 3.1 4.2Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-23219Published

The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110102Published

powerlevel10k through 1.20.0 Download of Code Without Integrity Check in gitstatus Installer

cve-program ·

Vendor product: powerlevel10k

CVSS 4.0 7.7 · CVSS 3.1 7.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-94216Published

ST Engineering iDirect iDX/Evo iDX HTTP Request authorize response splitting

cve-program ·

Vendor product: iDX · Vendor product: Evo iDX

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-94214Published

ST Engineering iDirect iDX/Evo iDX Location Header redirect

cve-program ·

Vendor product: iDX · Vendor product: Evo iDX

CVSS 4.0 5.3 · CVSS 3.1 4.3 · CVSS 3.0 4.3 · CVSS 2.0 5.0Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110097Published

Ikaros 1.2.0 through 1.2.5 TOTP Authentication Bypass via Temp Token

cve-program ·

Vendor product: ikaros

CVSS 4.0 8.6 · CVSS 3.1 8.1Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-23218Published

The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially …

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-66057Published

Frappe: Open Redirect via Unsanitized OAuth State Param.

cve-program ·

Vendor product: frappe

CVSS 4.0 5.1Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-109620Published

SourceCodester Online Reviewer System index.php prepare sql injection

cve-program ·

Vendor product: Online Reviewer System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-22827Published

storeAtts in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-109195Published

Quay: repository auto-prune policy uuid idor in quay api

cve-program ·

https://access.redhat.com/downloads/content/package-browser/: quay/quay-rhel8 · https://access.redhat.com/downloads/content/package-browser/: quay/quay-rhel9

CVSS 3.1 3.1Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-104250Published

unstructured: Stored XSS via unescaped HTML generation

cve-program ·

Vendor product: unstructured

CVSS 3.1 6.1Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-59766Published

Gitea private repository metadata disclosure after access revocation

cve-program ·

Vendor product: code.gitea.io/gitea

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-22826Published

nextScaffoldPart in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-77459Published

Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks

cve-program ·

Vendor product: argo-cd

CVSS 3.1 9.9Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-60008Published

Gitea Jupyter notebook UI redress through CSS class injection

cve-program ·

Vendor product: gitea.dev

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-22825Published

lookup in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-109890Published

WordPress Premium Addons for Elementor plugin <= 4.11.110 - Broken Access Control vulnerability

cve-program ·

https://wordpress.org/plugins: premium-addons-for-elementor

CVSS 3.1 5.3Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-60018Published

Gitea OneDev migration denial of service

cve-program ·

Vendor product: code.gitea.io/gitea

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-22824Published

defineAttribute in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-62925Published

Gitea Alpine package parsing memory exhaustion

cve-program ·

Vendor product: gitea

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-63021Published

Gitea Swift package manifest memory exhaustion

cve-program ·

Vendor product: gitea

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-102989Published

TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses

cve-program ·

Vendor product: router · Vendor product: react-start · Vendor product: solid-start

CVSS 3.1 9.3Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-63792Published

Gitea private reusable workflow disclosure to fork runs

cve-program ·

Vendor product: gitea.dev

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-66849Published

Gitea restricted-user package visibility bypass

cve-program ·

Vendor product: code.gitea.io/gitea

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-101899Published

Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges

cve-program ·

Vendor product: axios

CVSS 4.0 6.9Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-66853Published

Gitea restricted-user organization metadata disclosure

cve-program ·

Vendor product: code.gitea.io/gitea

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-103028Published

SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source file denied by denied_patterns or outside allowed_patterns to an allowed destination name be…

nvd ·

CVSS 3.1 · [email protected] · Secondary 4.3Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2022-4450Published

The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and

nvd ·

CVSS 3.1 · [email protected] · Primary 7.5 · CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary 7.5Source modified 14 Oct 2026Recorded 24 Oct 2026

CVE-2022-4304Published

A timing based side channel exists in the OpenSSL RSA Decryption implementation

nvd ·

CVSS 3.1 · [email protected] · Primary 5.9 · CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary 5.9Source modified 14 Oct 2026Recorded 24 Oct 2026

CVE-2022-22823Published

build_model in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-66874Published

Gitea required Actions check bypass through skipped workflows

cve-program ·

Vendor product: gitea.dev

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-22822Published

addBinding in xmlparse.c in Expat (aka libexpat) before 2.4.3 has an integer overflow.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-67577Published

Gitea restricted-user activity and heatmap disclosure

cve-program ·

Vendor product: Gitea

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-68957Published

Gitea restricted-user issue search disclosure

cve-program ·

Vendor product: Gitea

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-50216Published

An integer underflow exists in the DNS proxy component of the macOS NetworkExtension system extension shipped with Akamai Guardicore Platform Agent (GPA) for macOS, whereby if a UDP datagram shorter than 96 bytes that begins with a specific…

cve-program ·

Vendor product: Guardicore Platform Agent

CVSS 3.1 5.3Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-22576Published

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as …

cve-program ·

Vendor product: https://github.com/curl/curl

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-109605Published

SourceCodester Simple Cafe Billing System User Management admin_class.php save_user improper authorization

cve-program ·

Vendor product: Simple Cafe Billing System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-106327Published

Incorrect authorization in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: High)

cve-program ·

Vendor product: Chrome

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-102402Published

Team <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ttp_filter_taxonomy' Post Meta via [tlpteam] Shortcode

cve-program ·

Vendor product: Team – Team Members Showcase Plugin

CVSS 3.1 6.4Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-70400Published

Gitea private migration creation with public-only tokens

cve-program ·

Vendor product: code.gitea.io/gitea

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-70402Published

Gitea local code execution through writable Git hooks

cve-program ·

Vendor product: code.gitea.io/gitea

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-70406Published

Gitea private comparison disclosure with public-only tokens

cve-program ·

Vendor product: code.gitea.io/gitea

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-70407Published

Gitea organization listing token scope bypass

cve-program ·

Vendor product: Gitea

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-73126Published

Gitea private workflow badge token scope bypass

cve-program ·

Vendor product: Gitea

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-73130Published

Gitea repository initialization resource exhaustion

cve-program ·

Vendor product: code.gitea.io/gitea

Source modified 14 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.