Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

695688 source statements · aliases may refer to the same vulnerability

CVE-2026-12613Published

Insecure Deserialization Leading to Remote Code Execution in Ministry of Justice's UYAP Document Editor

cve-program ·

Vendor product: UYAP Document Editor · Vendor product: UYAP Document Editor

CVSS 3.1 8.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-108719Published

LLMGateway through 1.20.0 Blind SSRF via Video-Generation callback_url

cve-program ·

Vendor product: LLMGateway

CVSS 4.0 5.3 · CVSS 3.1 5.0Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110170Published

Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)

cve-program ·

Vendor product: Chrome

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-18390Published

Command Injection in Ministry of Justice's UYAP Document Editor

cve-program ·

Vendor product: UYAP Document Editor · Vendor product: UYAP Document Editor

CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-108714Published

MCP Kotlin SDK through 0.15.0 Memory Exhaustion via Application.mcpWebSocket

cve-program ·

Vendor product: kotlin-sdk

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110160Published

Missing authorization in ReadingMode in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially bypass site isolation via a crafted HTML page. (…

cve-program ·

Vendor product: Chrome

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110139Published

Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

cve-program ·

Vendor product: Chrome

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110158Published

Use after free in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

cve-program ·

Vendor product: Chrome

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110143Published

Use of uninitialized variable in ThirdParty lmza_sdk in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted file. (Chromium security severity: High)

cve-program ·

Vendor product: Chrome

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110146Published

Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: High)

cve-program ·

Vendor product: Chrome

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110150Published

Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local program. (Chromium security severity: High)

cve-program ·

Vendor product: Chrome

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-110141Published

Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

cve-program ·

Vendor product: Chrome

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-2274Published

The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation with 2048 bit private keys incorrect on such machines and memory co…

nvd ·

CVSS 3.1 · [email protected] · Primary 9.8 · CVSS 2.0 · [email protected] · Primary 10.0Source modified 14 Oct 2026Recorded 24 Oct 2026

CVE-2022-2097Published

AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised implementation will not encrypt the entirety of the data under some circumstances. This could reveal sixteen bytes of data that was preexisting in the memory that was…

nvd ·

CVSS 3.1 · [email protected] · Primary 5.3 · CVSS 2.0 · [email protected] · Primary 5.0Source modified 14 Oct 2026Recorded 24 Oct 2026

CVE-2022-1473Published

The OPENSSL_LH_flush() function, which empties a hash table, contains a bug that breaks reuse of the memory occuppied by the removed hash table entries. This function is used when decoding certificates or keys. If a long lived process perio…

nvd ·

CVSS 3.1 · [email protected] · Primary 7.5 · CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary 7.5 · CVSS 2.0 · [email protected] · Primary 5.0Source modified 14 Oct 2026Recorded 24 Oct 2026

CVE-2022-1434Published

The OpenSSL 3.0 implementation of the RC4-MD5 ciphersuite incorrectly uses the AAD data as the MAC key. This makes the MAC key trivially predictable. An attacker could exploit this issue by performing a man-in-the-middle attack to modify da…

nvd ·

CVSS 3.1 · [email protected] · Primary 5.9 · CVSS 2.0 · [email protected] · Primary 4.3Source modified 14 Oct 2026Recorded 24 Oct 2026

CVE-2022-1343Published

The function `OCSP_basic_verify` verifies the signer certificate on an OCSP response. In the case where the (non-default) flag OCSP_NOCHECKS is used then the response will be positive (meaning a successful verification) even in the case whe…

nvd ·

CVSS 3.1 · [email protected] · Primary 5.3 · CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary 5.3 · CVSS 2.0 · [email protected] · Primary 4.3Source modified 14 Oct 2026Recorded 24 Oct 2026

CVE-2022-0778Published

The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in c…

nvd ·

CVE-2022-2586Published

It was discovered that a nft object or expression could reference a nft set on a different nft table, leading to a use-after-free once that table was deleted.

cve-program ·

Vendor product: linux

CVSS 3.1 5.3Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2025-13281Published

A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass. This vulnerability allows authorized users to leak arbitrary information from unprotected endpoint…

nvd ·

CVSS 3.1 · [email protected] · Secondary 5.8Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2025-13822Published

MCPHub in versions below 0.11.0 is vulnerable to authentication bypass. Some endpoints are not protected by authentication middleware, allowing an unauthenticated attacker to perform actions in the name of other users and using their privil…

nvd ·

CVSS 4.0 · [email protected] · Secondary 5.3 · CVSS 3.1 · [email protected] · Primary 5.3Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2025-64526Published

Strapi is an open source headless content management system. In Strapi versions prior to 5.45.0, the rate-limit middleware in the users-permissions plugin derived its rate-limit key in part from `ctx.request.body.email`, including on routes…

nvd ·

CVSS 4.0 · [email protected] · Secondary 6.9 · CVSS 3.1 · [email protected] · Primary 5.3Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2025-66402Published

Misskey is an open source, federated social media platform. Starting in version 13.0.0-beta.16 and prior to version 2025.12.0, an actor who does not have permission to view favorites or clips can can export the posts and view the contents. …

nvd ·

CVSS 4.0 · [email protected] · Secondary 7.1 · CVSS 3.1 · [email protected] · Primary 6.5Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2025-66482Published

Misskey is an open source, federated social media platform. Attackers who use an untrusted reverse proxy or not using a reverse proxy at all can bypass IP rate limiting by adding a forged X-Forwarded-For header. Starting with version 2025.9…

nvd ·

CVSS 4.0 · [email protected] · Secondary 6.9 · CVSS 3.1 · [email protected] · Primary 6.5Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2025-67750Published

Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of Salesforce Flows. Versions 6.10.5 and below allow a maliciously crafted flow metadata file to cause arbitrary JavaScript ex…

nvd ·

CVSS 3.1 · [email protected] · Secondary 8.4Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2025-67897Published

In Sequoia before 2.1.0, aes_key_unwrap panics if passed a ciphertext that is too short. A remote attacker can take advantage of this issue to crash an application by sending a victim an encrypted message with a crafted PKESK or SKESK packe…

nvd ·

CVSS 3.1 · [email protected] · Secondary 5.3Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2025-67898Published

MJML through 4.18.0 allows mj-include directory traversal to test file existence and (in the type="css" case) read files. NOTE: this issue exists because of an incomplete fix for CVE-2020-12827.

nvd ·

CVSS 3.1 · [email protected] · Secondary 4.5Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2025-71422Published

Contrast is a Kubernetes runtime for confidential containers. In versions before 1.12.1, the secure persistent volume feature is vulnerable to a malicious host supplying a crafted LUKS2 volume to a pod VM. LUKS2 volume metadata is not authe…

nvd ·

CVSS 4.0 · [email protected] · Secondary 6.9 · CVSS 3.1 · [email protected] · Secondary 5.7Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2025-71423Published

Edgelesssys Contrast is a confidential-computing runtime for Kubernetes. In versions 1.9.0 before 1.12.2, the initializer logs the full NewMeshCert response — which contains the workload secret — to standard output at INFO level. As a resul…

nvd ·

CVSS 4.0 · [email protected] · Secondary 8.5 · CVSS 3.1 · [email protected] · Secondary 7.3Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2025-71424Published

Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0. The VOLUME directive in a Dockerfile (config.volumes in the OCI image configuration) is only a hint and is not…

nvd ·

CVSS 4.0 · [email protected] · Secondary 5.1 · CVSS 3.1 · [email protected] · Secondary 3.5Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2025-71425Published

Contrast (Edgeless Systems) before 1.8.1 logs the workload secret to stderr, and thus to Kubernetes logs, when the Contrast initializer is configured with CONTRAST_LOG_LEVEL set to info or debug. Because info is the default, all installatio…

nvd ·

CVSS 4.0 · [email protected] · Secondary 8.5 · CVSS 3.1 · [email protected] · Secondary 7.3Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2025-71426Published

Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.4.1, a recovering Coordinator does not verify the seed supplied by the recovering party. An attacker can therefore stand up a rogue Coordinator whose manifest…

nvd ·

CVSS 4.0 · [email protected] · Secondary 7.1 · CVSS 3.1 · [email protected] · Secondary 7.1Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2026-75899Published

fast-uri is a URI parser for Node.js. It decodes percent escapes in a hostname during parsing and then decodes the parsed hostname a second time during authority recomposition, so a single call to normalize or resolve can turn nested percen…

nvd ·

CVSS 3.1 · ce714d77-add3-4f53-aff5-83d477b104bb · Secondary 7.5Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2026-75931Published

fast-uri is a URI parser for Node.js. It canonicalizes a host to its ASCII form only when the input carries an explicit scheme, so a scheme-relative reference such as a host preceded by two slashes is returned with its host verbatim and no …

nvd ·

CVSS 3.1 · ce714d77-add3-4f53-aff5-83d477b104bb · Secondary 7.5Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2026-75975Published

fast-uri is a URI parser for Node.js. Its custom parser for bracketed IPv6 literals does not validate the complete IPv6 grammar, so invalid trailing text in an authority can be silently discarded and a malformed attacker-controlled host is …

nvd ·

CVSS 3.1 · ce714d77-add3-4f53-aff5-83d477b104bb · Secondary 7.5Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2026-76172Published

fast-uri is a URI parser for Node.js. During parsing it runs a legacy decoding pass over the scheme component and never re-escapes the result, and serialization writes the scheme back out verbatim, unlike the host component which is re-esca…

nvd ·

CVSS 3.1 · ce714d77-add3-4f53-aff5-83d477b104bb · Secondary 7.5Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2022-2509Published

A vulnerability found in gnutls. This security flaw happens because of a double free error occurs during verification of pkcs7 signatures in gnutls_pkcs7_verify function.

cve-program ·

Vendor product: GnuTLS

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-2503Published

Linux Kernel LoadPin bypass via dm-verity table reload

cve-program ·

Vendor product: Linux Kernel

CVSS 3.1 6.9Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-2327Published

Use-after-free in io_uring ad work_flags in Linux Kernel

cve-program ·

Vendor product: Linux Kernel

CVSS 3.1 7.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-2274Published

RSA implementation bug in AVX512IFMA instructions

cve-program ·

Vendor product: OpenSSL

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-2153Published

A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local atta…

cve-program ·

Vendor product: kernel

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-2097Published

AES OCB fails to encrypt some bytes

cve-program ·

Vendor product: OpenSSL

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-2078Published

A vulnerability was found in the Linux kernel's nft_set_desc_concat_parse() function .This flaw allows an attacker to trigger a buffer overflow via nft_set_desc_concat_parse() , causing a denial of service and possibly to run code.

cve-program ·

Vendor product: kernel

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-37107Published

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-1882Published

A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_info() that is already called. This flaw allows a local user to crash or po…

cve-program ·

Vendor product: kernel

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-1852Published

A NULL pointer dereference flaw was found in the Linux kernel’s KVM module, which can lead to a denial of service in the x86_emulate_insn in arch/x86/kvm/emulate.c. This flaw occurs while executing an illegal instruction in guest in the Int…

cve-program ·

Vendor product: kernel

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-1679Published

A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages. This flaw allows a local user to crash or potentially es…

cve-program ·

Vendor product: Kernel

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-1473Published

Resource leakage when decoding certificates and keys

cve-program ·

Vendor product: OpenSSL

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-108940Published

EricLBuehler Mistral.rs handlers.rs calibration_apply path traversal

cve-program ·

Vendor product: Mistral.rs

CVSS 4.0 6.9 · CVSS 3.1 6.5 · CVSS 3.0 6.5 · CVSS 2.0 6.4Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-1462Published

An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ld…

cve-program ·

Vendor product: kernel

Source modified 14 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.