Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

695690 source statements · aliases may refer to the same vulnerability

CVE-2019-3856Published

An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2 before 1.8.1 in the way keyboard prompt requests are parsed. A remote attacker who compromises a SSH server may be able to execute code on the c…

cve-program ·

Vendor product: libssh2

CVSS 3.0 7.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2019-3855Published

An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client…

cve-program ·

Vendor product: libssh2

CVSS 3.0 7.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2018-25032Published

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2018-20843Published

In libexpat in Expat before 2.2.7, XML input including XML names that contain a large number of colons could make the XML parser consume a high amount of RAM and CPU resources while processing (enough to be usable for denial-of-service atta…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2018-20482Published

GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of service (infinite read loop in sparse_dump_region in sparse.c) by modifying a file that is supposed to …

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2018-19591Published

In the GNU C Library (aka glibc or libc6) through 2.28, attempting to resolve a crafted hostname via getaddrinfo() leads to the allocation of a socket descriptor that is not closed. This is related to the if_nametoindex() function.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2018-18928Published

International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2018-14567Published

libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035 a…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2018-14404Published

A NULL pointer dereference vulnerability exists in the xpath.c:xmlXPathCompOpEval() function of libxml2 through 2.9.8 when parsing an invalid XPath expression in the XPATH_OP_AND or XPATH_OP_OR case. Applications processing untrusted XSL fo…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2018-12886Published

stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of …

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2018-0495Published

Libgcrypt before 1.7.10 and 1.8.x before 1.8.3 allows a memory-cache side-channel attack on ECDSA signatures that can be mitigated through the use of blinding during the signing process in the _gcry_ecc_ecdsa_sign function in cipher/ecc-ecd…

cve-program ·

Vendor product: Libgcrypt before 1.7.10 and 1.8.x before 1.8.3

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2017-18258Published

The xz_head function in xzlib.c in libxml2 before 2.9.6 allows remote attackers to cause a denial of service (memory consumption) via a crafted LZMA file, because the decoder functionality does not restrict memory usage to what is required …

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2017-17512Published

sensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the program specified by the BROWSER environment variable, which allows remote attackers to conduct argument-injection attacks via a crafted URL, as…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2017-16932Published

parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2017-16931Published

parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference function in the case of a '%' character in a DTD name.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2017-15422Published

Integer overflow in international date handling in International Components for Unicode (ICU) for C/C++ before 60.1, as used in V8 in Google Chrome prior to 63.0.3239.84 and other products, allowed a remote attacker to perform an out of bou…

cve-program ·

Vendor product: Google Chrome prior to 63.0.3239.84 unknown

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2017-9050Published

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists because of …

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2017-9049Published

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c. This vulnerability causes programs that use libxml2, such as PHP, to crash. This vulnerability exists becaus…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2017-9048Published

libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. At…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2017-9047Published

A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801. The function xmlSnprintfElementContent in valid.c is supposed to recursively dump the element content definition into a char buffer 'buf' of size 'size'. The variable …

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2017-7376Published

Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling redirects.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2017-7375Published

A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request entity substitution, DTD validation, external DTD subset loading, or default DTD attributes). Depending on the context, th…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2017-0663Published

A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within the context of an unprivileged process. This issue is rated as High due to the possibility of remote c…

cve-program ·

Vendor product: Android

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2016-10739Published

In the GNU C Library (aka glibc or libc6) through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly …

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2016-10228Published

The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid mu…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2016-9318Published

libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but other files may not be opened, which makes it easier for remote attacker…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2016-5131Published

Use-after-free vulnerability in libxml2 through 2.9.4, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the XPointer range-to…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2016-4658Published

xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute ar…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2016-3709Published

Possible cross-site scripting vulnerability in libxml after commit 960f0e2.

cve-program ·

Vendor product: libxml2

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2016-3189Published

Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2015-20107Published

In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch wit…

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2014-7209Published

run-mailcap in the Debian mime-support package before 3.52-1+deb7u1 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename.

cve-program ·

Vendor product: n/a

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2013-4235Published

shadow: TOCTOU (time-of-check time-of-use) race condition when copying and removing directory trees

cve-program ·

Vendor product: shadow

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2013-0340Published

expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to cause a denial of service (resource consumption), send HTTP …

cve-program ·

https://github.com/libexpat/libexpat/: libexpat

Source modified 14 Oct 2026Recorded 23 Oct 2026

GHSA-88h9-xgvx-hvf2Published

@grpc/grpc-js: The exact path match matcher incorrectly only applies a prefix match for case-insensitive matches

osv · CVE-2026-101914

npm: @grpc/grpc-js-xds · npm: @grpc/grpc-js-xds

MODERATESource modified 14 Oct 2026Recorded 24 Oct 2026

CVE-2026-70188Published

Inconsistent interpretation of http requests ('http request/response smuggling') in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network.

nvd ·

CVSS 3.1 · [email protected] · Secondary 9.1Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2026-70183Published

Concurrent execution using shared resource with improper synchronization ('race condition') in ASP.NET Core allows an authorized attacker to elevate privileges over a network.

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.5Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2026-70175Published

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.

nvd ·

CVSS 3.1 · [email protected] · Secondary 8.1Source modified 14 Oct 2026Recorded 25 Oct 2026

CVE-2023-4630Published

Missing Authorization in GitLab

cve-program ·

Vendor product: GitLab

CVSS 3.1 5.0Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-90531Published

Adobe Experience Manager | Improper Restriction of XML External Entity Reference ('XXE') (CWE-611)

cve-program ·

Vendor product: Adobe Experience Manager as a Cloud Service · Vendor product: Adobe Experience Manager 6.5 LTS · Vendor product: Adobe Experience Manager 6.5

CVSS 3.1 9.6Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-103967Published

Adobe Framemaker | Out-of-bounds Write (CWE-787)

cve-program ·

Vendor product: Adobe FrameMaker 2026 · Vendor product: Adobe FrameMaker 2022

CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-104344Published

Adobe Framemaker | Heap-based Buffer Overflow (CWE-122)

cve-program ·

Vendor product: Adobe FrameMaker 2026 · Vendor product: Adobe FrameMaker 2022

CVSS 3.1 7.8Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-77099Published

CVFS Command Execution

cve-program ·

Vendor product: Commvault Cloud · Vendor product: Grid(HSX) CVFS

CVSS 4.0 9.3Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-95680Published

IBM WebSphere Application Server is affected by an authorization bypass

cve-program ·

Vendor product: WebSphere Application Server

CVSS 3.1 8.0Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-103847Published

Dimension | Untrusted Search Path (CWE-426)

cve-program ·

Vendor product: Adobe Dimension

CVSS 3.1 8.6Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-18537Published

IBM Maximo Application Suite - Location Service for Esri Component Code Execution

cve-program ·

Vendor product: Maximo Application Suite - Location Service for Esri Component

CVSS 3.1 8.7Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-18533Published

IBM Maximo Application Suite - Location Service for Esri Component Code Execution

cve-program ·

Vendor product: Maximo Application Suite - Location Service for Esri Component

CVSS 3.1 6.5Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-18513Published

IBM Maximo Application Suite - Location Service for Esri Component Improper Privilege Management

cve-program ·

Vendor product: Maximo Application Suite - Location Service for Esri Component

CVSS 3.1 7.2Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-109709Published

Information disclosure, privilege escalation in the Security: Process Sandboxing component

cve-program ·

Vendor product: Firefox · Vendor product: Thunderbird

Source modified 14 Oct 2026Recorded 23 Oct 2026

CVE-2026-109756Published

Privilege escalation in the DOM: Navigation component

cve-program ·

Vendor product: Firefox · Vendor product: Thunderbird

Source modified 14 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.