Security
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Advisory catalog
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
Collected statements
698185 source statements · aliases may refer to the same vulnerabilityUI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via crafted network traffic. (Chromium security severity: Low)
cve-program ·
Vendor product: Chrome
Incorrect reference resolution in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a local program. (…
cve-program ·
Vendor product: Chrome
HDF5 out-of-bounds heap read in N-Bit filter decompression
cve-program ·
Vendor product: HDF5
HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read
cve-program ·
Vendor product: HDF5
Nbit filter NULL/short parameter-array dereference
cve-program ·
Vendor product: HDF5
Incorrect reference resolution in Autofill in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: H…
cve-program ·
Vendor product: Chrome
Incorrect reference resolution in Browser in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium…
cve-program ·
Vendor product: Chrome
All in One SEO < 5.0.2.1 - Unauthenticated Arbitrary Shortcode Execution via Search Query
cve-program ·
https://wordpress.org/plugins: All in One SEO
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.