Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

696049 source statements · aliases may refer to the same vulnerability

CVE-2026-50375Published

DirectX Graphics Kernel Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2

CVSS 3.1 6.3Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2023-2968Published

A remote attacker can trigger a denial of service in the socket.remoteAddress variable, by sending a crafted HTTP request. Usage of the undefined variable raises a TypeError exception.

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.5 · CVSS 3.1 · [email protected] · Primary 7.5Source modified 8 Oct 2026Recorded 24 Oct 2026

CVE-2026-40400Published

Windows PowerShell Remote Code Execution Vulnerability

cve-program ·

Vendor product: PowerShell 7.5 · Vendor product: PowerShell 7.6 · Vendor product: Windows 10 Version 1607

CVSS 3.1 8.0Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-65775Published

Windows Win32k Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-62832Published

Windows User Profile Service Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 21H2 · Vendor product: Windows 10 Version 22H2 · Vendor product: Windows 11 version 23H2

CVSS 3.1 7.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-56163Published

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Azure Kubernetes Service

CVSS 3.1 10.0Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-54998Published

Microsoft Exchange Online Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Microsoft Exchange Online

CVSS 3.1 8.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-61359Published

Windows Storage Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 11 version 23H2 · Vendor product: Windows 11 Version 23H2 · Vendor product: Windows 11 Version 24H2

CVSS 3.1 7.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-105828Published

Parse Server 9.0.0 before 9.10.1-alpha.12 Class Name Disclosure via GraphQL Errors

cve-program ·

Vendor product: parse-server · Vendor product: parse-server

CVSS 4.0 6.3Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-105833Published

EspoCRM before 10.0.5 IDOR via PersonalAccount Service Exposes IMAP Passwords

cve-program ·

Vendor product: espocrm

CVSS 4.0 8.3 · CVSS 3.1 7.7Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-59127Published

Windows Installer Elevation of Privilege Vulnerability

cve-program ·

Vendor product: Windows 10 Version 1607 · Vendor product: Windows 10 Version 1809 · Vendor product: Windows 10 Version 21H2

CVSS 3.1 7.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-107638Published

pH7Builder before 18.5.0 2FA Brute Force via VerificationCodeFormProcess.php

cve-program ·

Vendor product: ph7builder

CVSS 4.0 7.6 · CVSS 3.1 6.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-76271Published

Denial of Service (DoS) in the Discover Splunk Observability Cloud app for Splunk Enterprise

cve-program ·

Vendor product: Splunk Enterprise

CVSS 3.1 6.5Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-76276Published

Information Disclosure in the Discover Splunk Observability Cloud app through Splunk Web for Splunk Enterprise

cve-program ·

Vendor product: Splunk Enterprise

CVSS 3.1 4.3Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-107675Published

FFmpeg through 9.0.2 Missing SSH Host Key Verification in sftp Protocol

cve-program ·

Vendor product: FFmpeg

CVSS 4.0 6.0 · CVSS 3.1 5.9Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-76286Published

Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server

cve-program ·

Vendor product: Splunk MCP Server

CVSS 3.1 5.3Source modified 8 Oct 2026Recorded 23 Oct 2026

GHSA-xw65-4hp5-5hc7Published

Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates

osv · CVE-2026-106444

npm: handlebars

MODERATESource modified 8 Oct 2026Recorded 24 Oct 2026

GHSA-24ch-f2g6-9hhhPublished

msgpack5: Deeply nested input can exhaust the decoder stack

osv · CVE-2026-107298

npm: msgpack5

MODERATESource modified 8 Oct 2026Recorded 24 Oct 2026

GHSA-9ffp-22j7-56r2Published

JHipster: Generated Applications Allow Stored XSS via Unrestricted Blob ContentType Opened as Same-Origin Blob

osv · CVE-2026-107303

npm: generator-jhipster · npm: react-jhipster

HIGHSource modified 8 Oct 2026Recorded 24 Oct 2026

GHSA-r223-96jv-q533Published

JHipster: SQL Injection in the Parameter of JHipster-Generated Reactive (WebFlux + R2DBC) Applicationssort

osv · CVE-2026-107375

npm: generator-jhipster

HIGHSource modified 8 Oct 2026Recorded 24 Oct 2026

GHSA-gcx5-hxj7-gpqqPublished

msgpack5: Quadratic parsing in the streaming decoder

osv · CVE-2026-107297

npm: msgpack5

MODERATESource modified 8 Oct 2026Recorded 24 Oct 2026

GHSA-8r5x-fm3f-whwjPublished

Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)

osv · CVE-2026-106446

npm: handlebars

CRITICALSource modified 8 Oct 2026Recorded 24 Oct 2026

GHSA-m6rx-h84q-8r95Published

LangChain: MongoDBChatMessageHistory query injection can allow cross-session access

osv · CVE-2026-106119

npm: @langchain/mongodb

MODERATESource modified 8 Oct 2026Recorded 24 Oct 2026

GHSA-26wq-p25c-j6fvPublished

msgpack5: Reserved byte can cause unbounded stream buffering

osv · CVE-2026-107299

npm: msgpack5

MODERATESource modified 8 Oct 2026Recorded 24 Oct 2026

GHSA-8hq7-ggx2-cc6mPublished

msgpack5: Partial options disable prototype protection

osv · CVE-2026-107301

npm: msgpack5

MODERATESource modified 8 Oct 2026Recorded 24 Oct 2026

GHSA-5x5g-h9x8-2fh9Published

msgpack5: Many buffered values can exhaust the streaming decoder stack

osv · CVE-2026-107300

npm: msgpack5

HIGHSource modified 8 Oct 2026Recorded 24 Oct 2026

CVE-2026-107230Published

AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy logins

cve-program ·

Vendor product: async-http-client

CVSS 3.1 7.4Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-62171Rejected

This CVE is a duplicate of another CVE.

cve-program ·

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-107281Published

AsyncHttpClient: Connection pool key omits the authenticated principal, so an NTLM or Negotiate connection is reused across identities

cve-program ·

Vendor product: async-http-client

CVSS 4.0 7.6Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-107229Published

AsyncHttpClient: Incomplete origin checks in the default cookie store allow cookie tossing onto public-suffix and IP-address hosts

cve-program ·

Vendor product: async-http-client

CVSS 3.1 4.0Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-107280Published

AsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.uk

cve-program ·

Vendor product: async-http-client

CVSS 4.0 6.9Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-107285Published

AsyncHttpClient: WebSocket proxy credentials sent to the origin server over a CONNECT tunnel

cve-program ·

Vendor product: async-http-client

CVSS 3.1 5.9Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-82627Published

Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included <= 7.6.1.1 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion

cve-program ·

Vendor product: Uncanny Automator – AI + Automation for WordPress | AI Agent, AI Page Builder, Free AI Usage Included

CVSS 3.1 7.5Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-87684Published

A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied contex…

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 8.7Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-87671Published

An out-of-bounds memory read vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1. Unauthenticated HTTP endpoints process specific URL query parameters without validating array index boundaries or pe…

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 7.1Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-87659Published

A critical authorization bypass vulnerability exists in the Management Server handling of Brocade Fabric OS versions before 10.0.1. A compromised switch connected to the fabric can transmit crafted inband Fibre Channel vendor-unique CT (Com…

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 7.1Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-87667Published

An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When executing configuration viewing commands with search pattern filte…

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 8.4Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-87660Published

An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged h…

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 7.0Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-93858Published

In OpenStack Mistral through 23.0.0, the std.ssh_proxied action passes a caller-supplied proxy_command value directly to paramiko.ProxyCommand() before any SSH connection to a gateway or target host is attempted. An authenticated project me…

cve-program ·

Vendor product: Mistral

CVSS 4.0 8.7Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-62170Rejected

This CVE is a duplicate of another CVE.

cve-program ·

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-87677Published

An OS command injection vulnerability exists in the account management subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When an administrator initiates an account deletion, the system invokes an internal ma…

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 5.4Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-87661Published

Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization. An attacker capable of corrupting the configuration structure will prevent the w…

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 6.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-107446Published

containerd overlaybd through 1.0.18 has a do_load_index (LSMT index loading) integer overflow (and resultant out-of-bounds heap access) for index_bytes, if an untrusted overlaybd blob from a registry is used in a scenario with multiple over…

cve-program ·

Vendor product: overlaybd

CVSS 3.1 6.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-94587Published

A buffer overflow vulnerability exists in the WebTools administrative interface handling configuration download or file transfer operations of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An authenticated user with …

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 6.9Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-94585Published

An authentication bypass vulnerability exists in the web management interface of Brocade Fabric OS versions before 9.2.2d running on the MXG610 platform. An unauthenticated, network-adjacent attacker can exploit an unauthenticated endpoint …

cve-program ·

Vendor product: Fabric OS

CVSS 4.0 7.7Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2023-5648Published

In Brocade ASCG before Brocade ASCG v3.0, several security-related HTTP Headers were missing in various Brocade ASCG URL paths, aiding unauthenticated attackers to perform attacks such as Cross-Site Scripting, Clickjacking, Information disc…

cve-program ·

Vendor product: Active Support Connectivity Gateway

CVSS 4.0 6.5Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2023-5649Published

An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid inputs like special characters leading to a Denial of Service (DoS) when co…

cve-program ·

Vendor product: Brocade Active Support Connectivity Gateway

CVSS 4.0 6.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-5047Published

A vulnerability in Brocade SANnav before 2.4.0b and 3.0.0 prints encoded passwords and authentication tokens in log files. The vulnerability could allow an authenticated attacker with access to the log file including the SANnav supportsave…

cve-program ·

Vendor product: Brocade SANnav

CVSS 4.0 8.2Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-5048Published

In Brocade SANnav before 3.0.0a, an SQL Injection vulnerability in various external API inventories have a vulnerability that allows an authenticated attacker to inject malicious data into some of the REST API -query parameters.

cve-program ·

Vendor product: Brocade SANnav

CVSS 4.0 6.1Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2026-5049Published

A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an uploaded content outside the intended directory.

cve-program ·

Vendor product: Brocade SANnav

CVSS 4.0 6.9Source modified 8 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.