Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

698185 source statements · aliases may refer to the same vulnerability

CVE-2026-106335Published

Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106373Published

Use after free in Fonts in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106269Published

Use after free in CSS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

cve-program ·

Vendor product: Chrome

Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-101207Published

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with r…

cve-program ·

Vendor product: OpenManage Integration

CVSS 3.1 8.8Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-106218Published

In JetBrains TeamCity before 2026.1.3

cve-program ·

Vendor product: TeamCity

CVSS 3.1 8.8Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-105985Published

Authenticated RCE via render-components Entry Type overrides

cve-program ·

https://packagist.org: craftcms/cms

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-91140Published

OS command injection in Progress Software Autonomous REST Connector GenAI Agents

cve-program ·

Vendor product: Autonomous REST Connector GenAI Agents

CVSS 3.1 9.6Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-25269Published

Out-of-bounds Write in Camera Driver

cve-program ·

Vendor product: Snapdragon

CVSS 3.1 6.7Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-25267Published

Missing Authorization in Core

cve-program ·

Vendor product: Snapdragon

CVSS 3.1 7.8Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2026-18022Published

pgvector buffer overflow via integer wraparound in IVFFlat index build on 32-bit systems

cve-program ·

Vendor product: pgvector

CVSS 3.1 8.8Source modified 7 Oct 2026Recorded 23 Oct 2026

CVE-2025-9290Published

Authentication Weakness on Omada Controllers, Gateways and Access Points

cve-program ·

Vendor product: Omada Software Controller · Vendor product: Omada Cloud Controller · Vendor product: Omada Hardware Controller (OC200, OC300, OC400)

CVSS 4.0 6.0Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-105186Published

itsourcecode Online Admission System new.php sql injection

cve-program ·

Vendor product: Online Admission System

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-105182Published

SourceCodester Online Reviewer Management System btn_functions.php update sql injection

cve-program ·

Vendor product: Online Reviewer Management System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-105178Published

SourceCodester Drug Recommendation System Symptom Creation add_symptom.php mysqli_real_escape_string sql injection

cve-program ·

Vendor product: Drug Recommendation System

CVSS 4.0 5.1 · CVSS 3.1 4.7 · CVSS 3.0 4.7 · CVSS 2.0 5.8Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-105292Published

Chaterm before 0.12.1 Login CSRF via chaterm:// OAuth Callback

cve-program ·

Vendor product: Chaterm

CVSS 4.0 6.0 · CVSS 3.1 5.9Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-105174Published

Gerapy Project Management views.py project_create path traversal

cve-program ·

Vendor product: Gerapy

CVSS 4.0 5.3 · CVSS 3.1 5.4 · CVSS 3.0 5.4 · CVSS 2.0 5.5Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-95264Published

Feehi CMS 2.1.1 is vulnerable to Directory Traversal. An authenticated backend user with article edit permission can delete arbitrary files writable by the PHP process. Article image metadata is used to construct a filesystem path and is pa…

cve-program ·

Vendor product: n/a

Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-88396Published

ApiAdmin v5.0 and before is vulnerable to Directory Traversal. The admin file-upload endpoint POST /admin/Index/upload in ApiAdmin takes the uploaded file's extension verbatim there is no whitelist, blacklist or content check and move_uploa…

cve-program ·

Vendor product: n/a

Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2025-68278Published

Tina is a headless content management system. In tinacms prior to version 3.1.1, tinacms uses the gray-matter package in an insecure way allowing attackers that can control the content of the processed markdown files, e.g., blog posts, to e…

nvd ·

CVSS 4.0 · [email protected] · Secondary 7.3 · CVSS 3.1 · [email protected] · Primary 8.8Source modified 6 Oct 2026Recorded 25 Oct 2026

CVE-2025-71380Published

The Execute Command node in n8n allows authenticated users to execute arbitrary commands on the host system where n8n runs. Attackers with user access or compromised credentials can exploit this node to run malicious commands, potentially l…

nvd ·

CVSS 4.0 · [email protected] · Secondary 8.7 · CVSS 3.1 · [email protected] · Secondary 8.8Source modified 6 Oct 2026Recorded 25 Oct 2026

CVE-2025-71401Published

better-auth (npm) before 1.4.2 allows an external request to configure baseURL when it is not otherwise defined (e.g., BETTER_AUTH_URL is unset). An attacker able to make the very first request to the server after startup can poison the rou…

nvd ·

CVSS 4.0 · [email protected] · Secondary 9.3 · CVSS 3.1 · [email protected] · Secondary 5.9Source modified 6 Oct 2026Recorded 25 Oct 2026

CVE-2025-71402Published

better-auth versions greater than 1.3.34 and before 1.4.0 contain a vulnerability in the multi-session plugin's /sign-out after-hook, which trusts raw multi-session cookies and forwards extracted values to internalAdapter.deleteSessions wit…

nvd ·

CVSS 4.0 · [email protected] · Secondary 2.0Source modified 6 Oct 2026Recorded 25 Oct 2026

CVE-2025-71403Published

better-auth versions before 1.1.20 contain a bypass vulnerability in trustedOrigins validation logic affecting absolute URLs and wildcard domains. Attackers can construct malicious callbackURL parameters that pass origin checks and trigger …

nvd ·

CVSS 4.0 · [email protected] · Secondary 7.1 · CVSS 3.1 · [email protected] · Secondary 7.1Source modified 6 Oct 2026Recorded 25 Oct 2026

CVE-2025-71404Published

better-auth versions after v0.0.2 and before 1.1.16 contain a reflected cross-site scripting (XSS) vulnerability on the /api/auth/error page, where the value of the 'error' URL parameter is reflected as HTML without proper neutralization. A…

nvd ·

CVSS 4.0 · [email protected] · Secondary 5.1Source modified 6 Oct 2026Recorded 25 Oct 2026

CVE-2026-25044Published

Budibase is an open-source low-code platform. Prior to version 3.33.4, the bash automation step executes user-provided commands using execSync without proper sanitization or validation. User input is processed through processStringSync whic…

nvd ·

CVSS 4.0 · [email protected] · Secondary 8.7 · CVSS 3.1 · [email protected] · Primary 8.8Source modified 6 Oct 2026Recorded 25 Oct 2026

CVE-2026-31818Published

Budibase is an open-source low-code platform. Prior to version 3.33.4, a server-side request forgery (SSRF) vulnerability exists in Budibase's REST datasource connector. The platform's SSRF protection mechanism (IP blacklist) is rendered co…

nvd ·

CVSS 3.1 · [email protected] · Secondary 9.6 · CVSS 3.1 · [email protected] · Primary 9.9Source modified 6 Oct 2026Recorded 25 Oct 2026

CVE-2026-34752Published

Haraka is a Node.js mail server. Prior to version 3.1.4, sending an email with proto: as a header name crashes the Haraka worker process. This issue has been patched in version 3.1.4.

nvd ·

CVSS 4.0 · [email protected] · Secondary 8.7 · CVSS 3.1 · [email protected] · Primary 7.5Source modified 6 Oct 2026Recorded 25 Oct 2026

CVE-2026-35214Published

Budibase is an open-source low-code platform. Prior to version 3.33.4, the plugin file upload endpoint (POST /api/plugin/upload) passes the user-supplied filename directly to createTempFolder() without sanitizing path traversal sequences. A…

nvd ·

CVSS 3.1 · [email protected] · Secondary 8.7Source modified 6 Oct 2026Recorded 25 Oct 2026

CVE-2026-35216Published

Budibase is an open-source low-code platform. Prior to version 3.33.4, an unauthenticated attacker can achieve Remote Code Execution (RCE) on the Budibase server by triggering an automation that contains a Bash step via the public webhook e…

nvd ·

CVSS 3.1 · [email protected] · Secondary 9.0Source modified 6 Oct 2026Recorded 25 Oct 2026

CVE-2026-84292Published

fast-uri serializes the port component of a URI without validating it. When recomposing the authority, the userinfo and host components are escaped but the port is concatenated verbatim, so a port value that is not a sequence of digits can …

nvd ·

CVSS 3.1 · ce714d77-add3-4f53-aff5-83d477b104bb · Secondary 7.5Source modified 6 Oct 2026Recorded 25 Oct 2026

CVE-2026-88394Published

WookTeam v1.6.6 and before is vulnerable to a Directory Traversal. The project task export endpoint /api/project/task/export downloads an arbitrary file from the server when the data parameter is supplied with a crafted JSON payload. The fi…

cve-program ·

Vendor product: n/a

Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-105170Published

kishor-23 food-waste-management-system Admin Signup signup.php missing authentication

cve-program ·

Vendor product: food-waste-management-system

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-105166Published

kishor-23 food-waste-management-system Food Donation Form fooddonateform.php insert sql injection

cve-program ·

Vendor product: food-waste-management-system

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-105161Published

invariant-systems-ai aiir Policy Gate signature verification

cve-program ·

Vendor product: aiir

CVSS 4.0 6.9 · CVSS 3.1 5.3 · CVSS 3.0 5.3 · CVSS 2.0 5.0Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-105089Published

WWBN AVideo through 29.2.0 Stored XSS via trailer1 in YouPHPFlix2 Templates

cve-program ·

Vendor product: AVideo

CVSS 4.0 9.3 · CVSS 3.1 8.7Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-105149Published

mooSocial all-products sql injection

cve-program ·

Vendor product: mooSocial

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-105145Published

Weaviate Verba generate_stream Endpoint util.py get_environment information disclosure

cve-program ·

Vendor product: Verba

CVSS 4.0 6.9 · CVSS 3.1 5.3 · CVSS 3.0 5.3 · CVSS 2.0 5.0Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-105135Published

InternLM MindSearch Planner Agent graph.py ExecutionAction.run code injection

cve-program ·

Vendor product: MindSearch

CVSS 4.0 10.0 · CVSS 3.1 10.0 · CVSS 3.0 10.0 · CVSS 2.0 10.0Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-49880Published

In multiple functions of nfa_nfcee_act.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede…

cve-program ·

Vendor product: Android

Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-106217Published

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-106392Published

Information leak in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-106213Published

Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-106336Published

Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-106360Published

Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-106398Published

Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-106394Published

Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

cve-program ·

Vendor product: Chrome

Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-106260Published

Incorrect authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

cve-program ·

Vendor product: Chrome

Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-106325Published

Incorrect reference resolution in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

cve-program ·

Vendor product: Chrome

Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-106265Published

UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Source modified 6 Oct 2026Recorded 23 Oct 2026

CVE-2026-106302Published

UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Source modified 6 Oct 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.