Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

695688 source statements · aliases may refer to the same vulnerability

CVE-2022-1434Published

Incorrect MAC key used in the RC4-MD5 ciphersuite

cve-program ·

Vendor product: OpenSSL

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-1343Published

OCSP_basic_verify may incorrectly verify the response signing certificate

cve-program ·

Vendor product: OpenSSL

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-108936Published

Edimax BR-6208AC QoS Page formQoS cross site scripting

cve-program ·

Vendor product: BR-6208AC

CVSS 4.0 4.8 · CVSS 3.1 2.4 · CVSS 3.0 2.4 · CVSS 2.0 3.3Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-109667Published

Frappe ERPNext before 15.111.0 Privilege Escalation via Unauthorized Record Creation

cve-program ·

Vendor product: erpnext

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-1304Published

An out-of-bounds read/write vulnerability was found in e2fsprogs 1.46.5. This issue leads to a segmentation fault and possibly arbitrary code execution via a specially crafted filesystem.

cve-program ·

Vendor product: e2fsprogs

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-109662Published

Frappe ERPNext before 15.112.0 Stored XSS via Public Portal Form

cve-program ·

Vendor product: erpnext

CVSS 4.0 5.3 · CVSS 3.1 6.1Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-106366Published

Incomplete cleanup in CustomTabs in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

cve-program ·

Vendor product: Chrome

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-109657Published

Frappe ERPNext 16.x before 16.27.0 Stored XSS via Unescaped Record Name

cve-program ·

Vendor product: erpnext

CVSS 4.0 5.1 · CVSS 3.1 5.4Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-109652Published

Frappe ERPNext before 15.119.1 Server-Side Template Injection via Message Fields

cve-program ·

Vendor product: erpnext

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-109647Published

Frappe ERPNext before 15.106.0 SQL Injection via Missing Validation

cve-program ·

Vendor product: erpnext

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-109642Published

Frappe ERPNext before 15.110.0 Missing Authorization in Certain Endpoints

cve-program ·

Vendor product: erpnext

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-1271Published

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-sele…

cve-program ·

Vendor product: gzip, xz-utils

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-1184Published

A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service.

cve-program ·

Vendor product: Kernel

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-1015Published

A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue.

cve-program ·

Vendor product: kernel

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-62040Published

WordPress Restrict User Access – Membership Plugin with Force plugin <= 2.8.1 - Broken Access Control vulnerability

cve-program ·

https://wordpress.org/plugins: restrict-user-access

CVSS 3.1 5.3Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-109637Published

Frappe ERPNext before 16.14.0 Missing Authorization Allows Master Data Modification

cve-program ·

Vendor product: erpnext

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-109632Published

Frappe ERPNext before 15.121.0 Missing Authorization on Certain Endpoints

cve-program ·

Vendor product: erpnext

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-84312Published

Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.1, GetCasdoorUri uses the configured Casdoor application name as a constant OAuth state value and CasdoorCallback does not compare the submitted state with a value boun…

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.1Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2026-109627Published

Frappe ERPNext before 15.120.0 Missing Authorization Exposes Financial Data

cve-program ·

Vendor product: erpnext

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-1012Published

A memory leak problem was found in the TCP source port generation algorithm in net/ipv4/tcp.c due to the small table perturb size. This flaw may allow an attacker to information leak and may cause a denial of service problem.

cve-program ·

Vendor product: Kernel

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-0778Published

Infinite loop in BN_mod_sqrt() reachable when parsing certificates

cve-program ·

Vendor product: OpenSSL

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-0563Published

A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an "INPUTRC" environment variable to get a path to the library config file. When the library cannot parse the specifie…

cve-program ·

Vendor product: util-linux

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2022-0391Published

A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator (URL) strings into components. The issue involves how the urlparse method does not sanitize input and allows character…

cve-program ·

Vendor product: python

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-47316Published

nfsd: fix NULL dereference in nfs3svc_encode_getaclres

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 7.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-47107Published

NFSD: Fix READDIR buffer overflow

cve-program ·

Vendor product: Linux · Vendor product: Linux

CVSS 3.1 9.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-47002Published

SUNRPC: Fix null pointer dereference in svc_rqst_free()

cve-program ·

Vendor product: Linux · Vendor product: Linux

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-46848Published

GNU Libtasn1 before 4.19.0 has an ETYPE_OK off-by-one array size check that affects asn1_encode_simple_der.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-46828Published

In libtirpc before 1.3.3rc1, remote attackers could exhaust the file descriptors of a process that uses libtirpc because idle TCP connections are mishandled. This can, in turn, lead to an svc_run infinite loop without accepting new connecti…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-109622Published

Frappe ERPNext before 15.121.0 Unauthorized Document Modification via Missing Authorization

cve-program ·

Vendor product: erpnext

CVSS 4.0 5.3 · CVSS 3.1 4.3Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-109609Published

Frappe ERPNext before 15.119.1 SQL Injection via Missing Input Validation

cve-program ·

Vendor product: erpnext

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-46195Published

GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory resources.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-46143Published

In doProlog in xmlparse.c in Expat (aka libexpat) before 2.4.3, an integer overflow exists for m_groupSize.

cve-program ·

Vendor product: n/a

CVSS 3.1 8.1Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-109596Published

Hugo from v0.162.0 before v0.167.0 Symlink File Disclosure via Nested Mount Ancestor

cve-program ·

Vendor product: hugo

CVSS 4.0 6.7 · CVSS 3.1 5.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-45960Published

In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory).

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2025-71432Published

Frappe ERPNext before 15.83.0 Reflected XSS Leading to Account Takeover

cve-program ·

Vendor product: erpnext

CVSS 4.0 8.6 · CVSS 3.1 8.1Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-54412Published

Frappe before 13.46.3 Improper Access Control for Email Templates

cve-program ·

Vendor product: frappe

CVSS 4.0 7.1 · CVSS 3.1 6.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-44879Published

In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2023-54407Published

Frappe 14.x before 14.45.0 Information Disclosure via Error Log Tracebacks

cve-program ·

Vendor product: frappe

CVSS 4.0 6.9 · CVSS 3.1 4.9Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-43618Published

GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input, leading to a segmentation fault on 32-bit platforms.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-43396Published

In iconvdata/iso-2022-jp-3.c in the GNU C Library (aka glibc) 2.34, remote attackers can force iconv() to emit a spurious '\0' character via crafted ISO-2022-JP-3 data that is accompanied by an internal state reset. This may affect data int…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-41617Published

sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedP…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-38604Published

In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-102596Published

Nango: Production flow RBAC bypass on private flow-read routes

cve-program ·

Vendor product: nango

CVSS 3.1 4.3Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-38202Published

fs/nfsd/trace.h in the Linux kernel before 5.13.4 might allow remote attackers to cause a denial of service (out-of-bounds read in strlen) by sending NFS traffic when the trace event framework is being used for nfsd.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-37750Published

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.5 and 1.19.x before 1.19.3 has a NULL pointer dereference in kdc/do_tgs_req.c via a FAST inner body that lacks a server field.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-37600Published

An integer overflow in util-linux through 2.37.1 can potentially cause a buffer overflow if an attacker were able to use system resources in a way that leads to a large number in the /proc/sysvipc/sem file. NOTE: this is unexploitable in GN…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-36690Published

A segmentation fault can occur in the sqlite3.exe command-line component of SQLite 3.36.0 via the idxGetTableInfo function when there is a crafted SQL query. NOTE: the vendor disputes the relevance of this report because a sqlite3.exe user …

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-36222Published

ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a r…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-36087Published

The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is sometimes a lack of checks for invalid statements in an optional block.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2021-36086Published

The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.