Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

698142 source statements · aliases may refer to the same vulnerability

CVE-2026-101027Published

Gitea migration SSRF through ALLOWED_DOMAINS address check bypass

cve-program ·

Vendor product: gitea.dev

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-104633Published

Gitea migration memory exhaustion from zero page size

cve-program ·

Vendor product: gitea.dev

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-102100Published

Kiteworks Core stored XSS

cve-program ·

Vendor product: Core

CVSS 3.1 8.7Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-102141Published

Kiteworks Core Privilege Escalation through External Control of File Name or Path

cve-program ·

Vendor product: Core

CVSS 3.1 6.7Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-82357Published

RT-Labs AB C-Open CANopen NULL pointer dereference

cve-program ·

Vendor product: C-Open

CVSS 3.1 6.5 · CVSS 4.0 7.1Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-102666Published

Joyland AI hard-coded credentials for push notifications

cve-program ·

Vendor product: Joyland.ai

CVSS 3.1 6.5 · CVSS 4.0 6.9Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-82358Published

RT-Labs AB C-Open CANopen SDO Server Write Protection Bypass

cve-program ·

Vendor product: C-Open

CVSS 3.1 6.5 · CVSS 4.0 7.1Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-102667Published

Joyland AI WebView command injection

cve-program ·

Vendor product: Joyland.ai

CVSS 4.0 9.0 · CVSS 3.1 8.3Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-102668Published

Joyland AI accepts TLS certificates without validation

cve-program ·

Vendor product: Joyland.ai

CVSS 4.0 6.9 · CVSS 3.1 5.3Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-102255Published

A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this vulnerability to…

cve-program ·

Vendor product: SMA1000

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-51852Published

agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_file_b64. The save_file_b64 method accepts user-controlled file paths without normalization or validation, allowing p…

cve-program ·

Vendor product: n/a

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106500Published

Backstage: Improper task state validation in Scaffolder backend

cve-program ·

Vendor product: backstage · Vendor product: plugin-scaffolder-backend

CVSS 3.1 8.5Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106589Published

In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForwarding configuration options, and lack o…

cve-program ·

Vendor product: OpenSSH

CVSS 3.1 2.9Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106399Published

Out of bounds read in Skia in Google Chrome prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially read memory via a crafted file. (Chromium security severity: Low)

cve-program ·

Vendor product: Chrome

Source modified 7 Oct 2026Recorded 23 Oct 2026

MAL-2026-17357Published

Malicious code in @ikyyjee/ikyysinggle (npm)

osv · GHSA-7cp5-9c7x-jc22

npm: @ikyyjee/ikyysinggle

Source modified 7 Oct 2026Recorded 24 Oct 2026

MAL-2026-17358Published

Malicious code in @ikyyjee/ikyysingle (npm)

osv · GHSA-jq3m-36mx-2xch

npm: @ikyyjee/ikyysingle

Source modified 7 Oct 2026Recorded 24 Oct 2026

CVE-2026-65142Published

NVIDIA Model-Optimizer contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information discl…

cve-program ·

Vendor product: Model-Optimizer

CVSS 3.1 7.8Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-65122Published

NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read. A successful exploit of this vulnerability may lead to denial of service.

cve-program ·

Vendor product: TensorRT

CVSS 3.1 5.5Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106424Published

Information leak in Audio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106376Published

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

cve-program ·

Vendor product: Chrome

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106215Published

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

cve-program ·

Vendor product: Chrome

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106231Published

Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

cve-program ·

Vendor product: Chrome

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106202Published

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

cve-program ·

Vendor product: Chrome

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106273Published

Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

cve-program ·

Vendor product: Chrome

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106300Published

Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106223Published

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106290Published

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: …

cve-program ·

Vendor product: Chrome

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106370Published

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: …

cve-program ·

Vendor product: Chrome

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106284Published

Out of bounds read in Printing in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to read memory outside the sandbox via a crafted HTML p…

cve-program ·

Vendor product: Chrome

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106395Published

Uninitialized resource in Dawn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106304Published

Out of bounds read in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106275Published

Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

cve-program ·

Vendor product: Chrome

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106494Published

Backstage: Improper input validation in cloud storage URL readers

cve-program ·

Vendor product: backstage · Vendor product: backend-defaults

CVSS 3.1 4.4Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106489Published

Backstage: Improper authorization enforcement for TechDocs static content

cve-program ·

Vendor product: backstage · Vendor product: plugin-techdocs-backend

CVSS 3.1 6.5Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106258Published

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

cve-program ·

Vendor product: Chrome

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106032Published

Server-side request forgery and local file read via unrestricted external OpenAPI reference resolution in Bedrock AgentCore Starter Toolkit agent import

cve-program ·

Vendor product: bedrock-agentcore-starter-toolkit

CVSS 4.0 5.7 · CVSS 3.1 5.7Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-105812Published

Code injection via unencoded configuration values during Python code generation in Bedrock AgentCore Starter Toolkit agent import

cve-program ·

Vendor product: bedrock-agentcore-starter-toolkit

CVSS 4.0 8.8 · CVSS 3.1 9.0Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-105488Published

Missing authorization in the global vault in Devolutions Server 2026.3.7.0 and earlier allows an authenticated user with only the global vault view permission to modify and delete global contact and folder entries.

cve-program ·

Vendor product: Server

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106447Published

StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor decoder recursively processes nested CBOR arrays, maps, and tags through _decodeValue() without enforcing a maximum nesting depth. A…

nvd ·

CVSS 4.0 · [email protected] · Secondary 8.7Source modified 7 Oct 2026Recorded 25 Oct 2026

CVE-2026-9226Published

Authentication bypass in the Azure AD external login flow in Devolutions Server 2026.3.7.0 and earlier allows a remote attacker to take over a user's account via replay of a captured login-session token exposed in a redirect URL.

cve-program ·

Vendor product: Server

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-51869Published

DB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime and executes code on host.

cve-program ·

Vendor product: n/a

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106462Published

Backstage: Scaffolder credential handling may allow unintended GitHub authentication fallback

cve-program ·

Vendor product: backstage · Vendor product: plugin-scaffolder-backend · Vendor product: plugin-scaffolder-backend-module-azure

CVSS 3.1 6.4Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106547Published

HDF5 heap buffer overflow in H5VM_array_fill via crafted fill-value metadata

cve-program ·

Vendor product: HDF5

CVSS 4.0 8.5Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-51862Published

DB-GPT 0.8.0 contains directory traversal in skill_upload (packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/agentic_data_api.py:40). A remote attacker can use the validated exploitation path to write files outside the intended workspace or s…

cve-program ·

Vendor product: n/a

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106502Published

Backstage: Sensitive information may be exposed in Scaffolder task failure events

cve-program ·

Vendor product: backstage · Vendor product: plugin-scaffolder-backend

CVSS 3.1 5.3Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106457Published

Backstage: Insufficient audience validation in the Cloudflare Access auth provider

cve-program ·

Vendor product: backstage · Vendor product: plugin-auth-backend-module-cloudflare-access-provider

CVSS 3.1 6.8Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-96594Published

Gitea repository media API stored XSS

cve-program ·

Vendor product: gitea.dev

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106507Published

Backstage: TechDocs arbitrary file read via mkdocs snippets

cve-program ·

Vendor product: backstage · Vendor product: plugin-techdocs-node

CVSS 3.1 5.3Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-43598Published

Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to dereference an attacker-controlled pointer, potentially resulting in remote code executio…

cve-program ·

Vendor product: AMD Instinct™ MI210 · Vendor product: AMD Instinct™ MI250 · Vendor product: AMD Instinct™ MI300A

CVSS 4.0 7.7Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-74008Published

WordPress Shortcodes and extra features for Phlox theme plugin <= 2.17.24 - Sensitive Data Exposure vulnerability

cve-program ·

https://wordpress.org/plugins: auxin-elements

CVSS 3.1 5.3Source modified 7 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.