Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

698013 source statements · aliases may refer to the same vulnerability

CVE-2022-22968Published

In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both…

cve-program ·

Vendor product: Spring Framework

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-1935Published

In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Re…

cve-program ·

Vendor product: Apache Tomcat

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2022-36227Published

In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites th…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-37714Published

Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions

cve-program ·

Vendor product: jsoup

CVSS 3.1 7.5Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2016-4472Published

The overflow protection in Expat is removed by compilers with certain optimization settings, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted XML data. NOTE: this vulnerabili…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2018-14719Published

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2017-9233Published

XML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows attackers to put the parser in an infinite loop using a malformed external entity definition from an external DTD.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2016-0718Published

Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-44906Published

Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-17563Published

When using FORM authentication with Apache Tomcat 9.0.0.M1 to 9.0.29, 8.5.0 to 8.5.49 and 7.0.0 to 7.0.98 there was a narrow window where an attacker could perform a session fixation attack. The window was considered too narrow for an explo…

cve-program ·

Vendor product: Apache Tomcat

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2016-9063Published

An integer overflow during the parsing of XML using the Expat library. This vulnerability affects Firefox < 50.

cve-program ·

Vendor product: Firefox

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-27619Published

In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2018-1000030Published

Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14 may also be vulnerable and it appears that Python 2.7.17 and prior may also be vulnerable however this has not been conf…

cve-program ·

Vendor product: n/a

CVSS 3.0 3.6Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-24122Published

Apache Tomcat information disclosure

cve-program ·

Vendor product: Apache Tomcat

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-12086Published

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connect…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-14379Published

SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-14439Published

A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has …

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-12384Published

FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code executi…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-16335Published

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-14892Published

A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization of a malicious object using commons-configuration 1 and 2 JNDI classes. An attacker could use this …

cve-program ·

Vendor product: jackson-databind

CVSS 3.0 7.5Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-18806Published

A memory leak in the ql_alloc_large_buffers() function in drivers/net/ethernet/qlogic/qla3xxx.c in the Linux kernel before 5.3.5 allows local users to cause a denial of service (memory consumption) by triggering pci_dma_mapping_error() fail…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-14540Published

A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-19066Published

A memory leak in the bfad_im_get_stats() function in drivers/scsi/bfa/bfad_attr.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering bfa_port_get_stats() failures, aka CID-0e6…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-11609Published

An issue was discovered in the stv06xx subsystem in the Linux kernel before 5.6.1. drivers/media/usb/gspca/stv06xx/stv06xx.c and drivers/media/usb/gspca/stv06xx/stv06xx_pb0100.c mishandle invalid descriptors, as demonstrated by a NULL point…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-19083Published

Memory leaks in *clock_source_create() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel before 5.3.8 allow attackers to cause a denial of service (memory consumption). This affects the dce112_clock_source_create() function…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-19082Published

Memory leaks in *create_resource_pool() functions under drivers/gpu/drm/amd/display/dc in the Linux kernel through 5.3.11 allow attackers to cause a denial of service (memory consumption). This affects the dce120_create_resource_pool() func…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-15219Published

An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-27171Published

An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that de…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-19080Published

Four memory leaks in the nfp_flower_spawn_phy_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allow attackers to cause a denial of service (memory consumption), aka CID-8572cea1461a.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-14250Published

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-15218Published

An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb.c driver.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-19965Published

In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-29374Published

An issue was discovered in the Linux kernel before 5.7.3, related to mm/gup.c and mm/huge_memory.c. The get_user_pages (aka gup) implementation, when used for a copy-on-write page, does not properly consider the semantics of read operations…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-19054Published

A memory leak in the cx23888_ir_probe() function in drivers/media/pci/cx23885/cx23888-ir.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service (memory consumption) by triggering kfifo_alloc() failures, aka CID-a…

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-14416Published

In the Linux kernel before 5.4.16, a race condition in tty->disc_data handling in the slip and slcan line discipline could lead to a use-after-free, aka CID-0ace17d56824. This affects drivers/net/slip/slip.c and drivers/net/can/slcan.c.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-19081Published

A memory leak in the nfp_flower_spawn_vnic_reprs() function in drivers/net/ethernet/netronome/nfp/flower/main.c in the Linux kernel before 5.3.4 allows attackers to cause a denial of service (memory consumption), aka CID-8ce39eb5a67a.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-38198Published

arch/x86/kvm/mmu/paging_tmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-14390Published

A flaw was found in the Linux kernel in versions before 5.9-rc6. When changing screen size, an out-of-bounds memory write can occur leading to memory corruption or a denial of service. Due to the nature of the flaw, privilege escalation can…

cve-program ·

Vendor product: kernel

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-10781Published

A flaw was found in the Linux Kernel before 5.8-rc6 in the ZRAM kernel module, where a user with a local account and the ability to read the /sys/class/zram-control/hot_add file can create ZRAM device nodes in the /dev/ directory. This read…

cve-program ·

Vendor product: kernel

CVSS 3.1 5.5Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-14060Published

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2020-14062Published

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2).

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-30640Published

Auth weakness in JNDIRealm

cve-program ·

Vendor product: Apache Tomcat

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2017-1000158Published

CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in heap-based buffer overflow (and possible arbitrary code execution)

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-31879Published

GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.

cve-program ·

Vendor product: n/a

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-11137Published

Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Processors D Family, Intel(R) Xeon(R) Processors E5 v4 Family, Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) process…

cve-program ·

Vendor product: 2019.2 IPU – UEFI

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-0123Published

Insufficient memory protection in Intel(R) 6th Generation Core Processors and greater, supporting SGX, may allow a privileged user to potentially enable escalation of privilege via local access.

cve-program ·

Vendor product: 2019.2 IPU – Intel(R) SGX and TXT

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-14565Published

Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier, and Linux versions 2.6.100.51363 and earlier, may allow an authenticated user to enable information disclosure, escalation of privilege or denial of…

cve-program ·

Vendor product: 2019.2 IPU – Intel(R) SGX

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-11136Published

Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors, 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privileged user to potentially enable escalati…

cve-program ·

Vendor product: 2019.2 IPU – UEFI

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2019-14566Published

Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure, escalation of privilege or denial of service via local access.

cve-program ·

Vendor product: 2019.2 IPU – Intel(R) SGX

Source modified 8 Oct 2026Recorded 23 Oct 2026

CVE-2021-40158Published

A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerabilities could lead t…

cve-program ·

Vendor product: Inventor

Source modified 8 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.