Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

698013 source statements · aliases may refer to the same vulnerability

CVE-2020-24512Published

Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

cve-program ·

Vendor product: Intel(R) Processors

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-11620Published

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly).

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-7598Published

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "proto" payload.

cve-program ·

Vendor product: minimist

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-14155Published

libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2018-1000802Published

Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in shutil module (make_archive function) that can result in Denial …

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2023-51764Published

Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and smtpd_discard_ehlo_keywords=chunking (or certain other options that exist in recent versions). Remote attackers can use …

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-3572Published

A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to dat…

cve-program ·

Vendor product: python-pip

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2022-22950Published

n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition.

cve-program ·

Vendor product: Spring Framework

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-36324Published

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

cve-program ·

Vendor product: CPG BIOS

CVSS 3.1 7.5Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-20794Published

An issue was discovered in the Linux kernel 4.18 through 5.6.11 when unprivileged user namespaces are allowed. A user can create their own PID namespace, and mount a FUSE filesystem. Upon interaction with this FUSE filesystem, if the usersp…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2022-1665Published

A set of pre-production kernel packages of Red Hat Enterprise Linux for IBM Power architecture can be booted by the grub in Secure Boot mode even though it shouldn't. These kernel builds don't have the secure boot lockdown patches applied t…

cve-program ·

Vendor product: Red Hat Enterprise Linux

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-38206Published

The mac80211 subsystem in the Linux kernel before 5.12.13, when a device supporting only 5 GHz is used, allows attackers to cause a denial of service (NULL pointer dereference in the radiotap parser) by injecting a frame with 802.11a rates.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2022-0264Published

A vulnerability was found in the Linux kernel's eBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use …

cve-program ·

Vendor product: kernel

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-15217Published

An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2018-1000879Published

libarchive version commit 379867ecb330b3a952fb7bfa7bffb7bbd5547205 onwards (release v3.3.0 onwards) contains a CWE-476: NULL Pointer Dereference vulnerability in ACL parser - libarchive/archive_acl.c, archive_acl_from_text_l() that can resu…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-38166Published

In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-36090Published

Apache Commons Compress 1.0 to 1.20 denial of service vulnerability

cve-program ·

Vendor product: Apache Commons Compress

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-20095Published

mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated hostcmd memory, aka CID-003b686ace82. This will cause a memory leak and denial of s…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2018-11307Published

An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11.2, and 2.9.6.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-16866Published

Unbound before 1.9.4 accesses uninitialized memory, which allows remote attackers to trigger a crash via a crafted NOTIFY query. The source IP address of the query must match an access-control rule.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2018-1000880Published

libarchive version commit 9693801580c0cf7c70e862d305270a16b52826a7 onwards (release v3.2.0 onwards) contains a CWE-20: Improper Input Validation vulnerability in WARC parser - libarchive/archive_read_support_format_warc.c, _warc_read() that…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-28097Published

The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-35477Published

In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation does not necessarily occur b…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-28972Published

In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-36311Published

An issue was discovered in the Linux kernel before 5.9. arch/x86/kvm/svm/sev.c allows attackers to cause a denial of service (soft lockup) by triggering destruction of a large SEV VM (which requires unregistering many encrypted regions), ak…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-34556Published

In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialize…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-38199Published

fs/nfs/nfs4client.c in the Linux kernel before 5.13.4 has incorrect connection-setup ordering, which allows operators of remote NFSv4 servers to cause a denial of service (hanging of mounts) by arranging for those servers to be unreachable …

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-12769Published

An issue was discovered in the Linux kernel before 5.4.17. drivers/spi/spi-dw.c allows attackers to cause a panic via concurrent calls to dw_spi_irq and dw_spi_transfer_one, aka CID-19b61392c5a8.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-11494Published

An issue was discovered in slc_bump in drivers/net/can/slcan.c in the Linux kernel 3.16 through 5.6.2. It allows attackers to read uninitialized can_frame data, potentially containing sensitive information from kernel stack memory, if the c…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-39537Published

An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-25639Published

A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the syste…

cve-program ·

Vendor product: kernel

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-4001Published

A race condition was found in the Linux kernel's ebpf verifier between bpf_map_update_elem and bpf_map_freeze due to a missing lock in kernel/bpf/syscall.c. In this flaw, a local user with a special privilege (cap_sys_admin or cap_bpf) can …

cve-program ·

Vendor product: kernel

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-15807Published

In the Linux kernel before 5.1.13, there is a memory leak in drivers/scsi/libsas/sas_expander.c when SAS expander discovery fails. This will cause a BUG and denial of service.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-8906Published

do_core_note in readelf.c in libmagic.a in file 5.35 has an out-of-bounds read because memcpy is misused.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2018-12022Published

An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Jodd-db jar (for database access for the Jodd fram…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-3711Published

SM2 Decryption Buffer Overflow

cve-program ·

Vendor product: OpenSSL

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-19530Published

In the Linux kernel before 5.2.10, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/class/cdc-acm.c driver, aka CID-c52873e5a1ef.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-34866Published

This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.14-rc3. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vuln…

cve-program ·

Vendor product: Kernel

CVSS 3.0 8.8Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-33624Published

In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusion) and consequently an unprivileged BPF program can read arbitrary memory locations via a side-channel attack, aka CID-…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-3702Published

u'Specifically timed and handcrafted traffic can cause internal errors in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic' in Sn…

cve-program ·

Vendor product: Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-19462Published

relay_open in kernel/relay.c in the Linux kernel through 5.4.1 allows local users to cause a denial of service (such as relay blockage) by triggering a NULL alloc_percpu result.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-12418Published

When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured with the JMX Remote Lifecycle Listener, a local attacker without access to the Tomcat process or configuration files is able to manipulate the RMI regist…

cve-program ·

Vendor product: Apache Tomcat

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-3655Published

A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory.

cve-program ·

Vendor product: kernel

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-24032Published

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files cou…

cve-program ·

Vendor product: Zstandard

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-1967Published

Segmentation fault in SSL_check_chain

cve-program ·

Vendor product: OpenSSL

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-27170Published

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive info…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2018-14718Published

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-36325Published

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

cve-program ·

Vendor product: CPG BIOS

CVSS 3.1 7.5Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-36323Published

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM.

cve-program ·

Vendor product: CPG BIOS

CVSS 3.1 7.5Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2023-32028Published

Microsoft SQL OLE DB Remote Code Execution Vulnerability

cve-program ·

Vendor product: Microsoft OLE DB Driver 19 for SQL Server · Vendor product: Microsoft OLE DB Driver 18 for SQL Server · Vendor product: Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)

CVSS 3.1 7.8Source modified 8 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.