Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

Advisory catalog

Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.

Collected statements

698686 source statements · aliases may refer to the same vulnerability

CVE-2026-54156Published

node-opcua is an OPC UA implementation for TypeScript and Node.js. Prior to 2.166.0, the process-global g_alreadyUsedNonce cache used by nonceAlreadyBeenUsed in packages/node-opcua-secure-channel/source/server/server_secure_channel_layer.ts…

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.5Source modified 30 Sep 2026Recorded 25 Oct 2026

CVE-2026-55866Published

SpiceDB is an open source database system for creating and managing security-critical application permissions. From 1.34.0 until 1.54.0, SpiceDB can return PERMISSIONSHIP_HAS_PERMISSION instead of PERMISSIONSHIP_CONDITIONAL_PERMISSION or PE…

nvd ·

CVSS 3.1 · [email protected] · Secondary 3.7Source modified 30 Sep 2026Recorded 25 Oct 2026

CVE-2026-97711Published

Serialize JavaScript serializes JavaScript values to a superset of JSON that includes regular expressions and functions. From 7.1.1 until 7.1.2, function values serialized by serialize-javascript are not fully protected against script-closi…

nvd ·

CVSS 4.0 · [email protected] · Secondary 2.3Source modified 30 Sep 2026Recorded 25 Oct 2026

CVE-2026-103395Published

LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Service

cve-program ·

Vendor product: LightLLM

CVSS 4.0 9.3 · CVSS 3.1 9.8Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-95362Published

Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-103230Published

AdithyaYelloju Restaurant-Management-System Order Placement ord.php mysqli_query sql injection

cve-program ·

Vendor product: Restaurant-Management-System

CVSS 4.0 6.9 · CVSS 3.1 7.3 · CVSS 3.0 7.3 · CVSS 2.0 7.5Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-103432Published

apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi, and upsfstats.cgi), a related issue to CVE-2026-15544.

cve-program ·

Vendor product: apcupsd

CVSS 3.1 8.1Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-102821Published

Russh: Unbounded memory exhaustion via CHANNEL_OPEN flood during a client-stalled rekey

cve-program ·

Vendor product: russh

CVSS 3.1 6.5Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-101880Published

OpenClaw Windows Node before 2026.7.1 Authorization Bypass

cve-program ·

Vendor product: OpenClaw Windows Node

CVSS 4.0 8.7 · CVSS 3.1 8.8Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-55177Published

CloudTAK: Authenticated full-read SSRF in /api/esri* routes — user-controlled URL fetched with no IP-classification guard

cve-program ·

Vendor product: CloudTAK

CVSS 4.0 7.6Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-101884Published

OpenClaw Windows Node before 2026.7.1 Remote Code Execution via Environment Override

cve-program ·

Vendor product: OpenClaw Windows Node

CVSS 4.0 7.7 · CVSS 3.1 7.5Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-95376Published

Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. (Chromium security severity: Me…

cve-program ·

Vendor product: Chrome

Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-95330Published

Improper state validation in Downloads in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

cve-program ·

Vendor product: Chrome

Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-102825Published

Russh: Configured server auth-attempt cap is not enforced in the USERAUTH_REQUEST runtime path

cve-program ·

Vendor product: russh

CVSS 3.1 3.7Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-102829Published

simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection

cve-program ·

Vendor product: git-js

CVSS 4.0 9.2Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-103233Published

AdithyaYelloju Restaurant-Management-System Admin Area admin authorization

cve-program ·

Vendor product: Restaurant-Management-System

CVSS 4.0 5.3 · CVSS 3.1 6.3 · CVSS 3.0 6.3 · CVSS 2.0 6.5Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-62308Published

Tugtainer: Authenticated SSRF via arbitrary notification URLs in test_notification endpoint

cve-program ·

Vendor product: tugtainer

CVSS 3.1 9.1Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-102877Published

Fider before 0.38.0 SSRF via DNS rebinding in webhook validation

cve-program ·

Vendor product: fider

CVSS 4.0 2.1 · CVSS 3.1 4.4Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-102925Published

virtualenv bash and fish activation scripts execute commands embedded in paths

cve-program ·

Vendor product: virtualenv

CVSS 3.1 7.8Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-71974Published

U-Boot before 2026.10-rc3 Out-of-Bounds Write via Android Bootmeth Partition Read

cve-program ·

Vendor product: u-boot

CVSS 4.0 4.3 · CVSS 3.1 4.8Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-103471Published

restbed through 5.0.0 Denial of Service via Unbounded Header Buffering

cve-program ·

Vendor product: restbed

CVSS 4.0 8.7 · CVSS 3.1 7.5Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-74225Published

U-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv6

cve-program ·

Vendor product: u-boot

CVSS 4.0 7.1 · CVSS 3.1 7.1Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-102621Published

Freedesktop Poppler SplashClip.cc clipToPath integer overflow

cve-program ·

Vendor product: Poppler

CVSS 4.0 4.8 · CVSS 3.1 3.3 · CVSS 3.0 3.3 · CVSS 2.0 1.7Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-103475Published

yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure

cve-program ·

Vendor product: yii2-starter-kit

CVSS 4.0 9.3 · CVSS 3.1 9.1Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-55094Published

Taskcluster: Unauthenticated remote code execution in `web-server` via GraphQL `filter` argument (sift `$where`)

cve-program ·

Vendor product: taskcluster

CVSS 4.0 8.7Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-47253Published

Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, the clear_plugin_cache(plugin) SQL scalar function in namespace/other_functions.go passes the caller-controlled plugin parameter through path.Join to os.RemoveAll witho…

nvd ·

CVSS 3.1 · [email protected] · Secondary 7.3Source modified 30 Sep 2026Recorded 25 Oct 2026

CVE-2026-103087Published

Uncontrolled recursion in the Gosub browser engine (gosub-engine) through 0.1.0 and main before commit 46868b3 allows a remote attacker to cause a Denial of Service (stack exhaustion and application crash) via an SVG document containing an …

cve-program ·

Vendor product: gosub-engine

CVSS 4.0 7.1Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-103101Published

Pexip Infinity 30.0 through 40.x before 41.0 is affected by improper input validation in the web server that allows a malicious attacker to render a Pexip Infinity node inaccessible.

cve-program ·

Vendor product: Infinity

CVSS 3.1 8.6Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-90783Published

MKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer Wraparound

cve-program ·

Vendor product: MKVToolNix

CVSS 3.1 7.8 · CVSS 4.0 8.5Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-103106Published

Pexip Infinity before 38.2, plus 39.0, 39.1, and 40.0, is affected by improper input validation within an internal Pexip Infinity service that allows an attacker with local access to escalate privileges to root. Exploitation requires an att…

cve-program ·

Vendor product: Infinity

CVSS 3.1 7.8Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-103470Published

In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate privileges.

cve-program ·

Vendor product: Grouper

CVSS 4.0 9.3Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-82255Published

gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where credentials are sent to attacker-controlled servers after HTTP redirects. The vulnerability occurs because credential vali…

nvd ·

CVSS 4.0 · [email protected] · Secondary 7.6 · CVSS 3.1 · [email protected] · Secondary 6.8Source modified 30 Sep 2026Recorded 25 Oct 2026

CVE-2026-74783Published

Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit guard that fails to stop recursive descent parsing of deeply nested expressions. Attackers can supply templates with deeply nested parentheses, array initiali…

nvd ·

CVSS 4.0 · [email protected] · Secondary 8.7 · CVSS 3.1 · [email protected] · Secondary 7.5Source modified 30 Sep 2026Recorded 25 Oct 2026

CVE-2026-103056Published

AiSOC 7.2.0 before 12.0.0 Command Injection via CrowdStrike RTR

cve-program ·

Vendor product: AiSOC

CVSS 4.0 9.4 · CVSS 3.1 9.0Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-87004Published

Tugtainer: OIDC id_token claims accepted without signature/audience/expiry verification

cve-program ·

Vendor product: tugtainer

CVSS 3.1 8.1Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-102397Published

WordPress Ultimate Maps by Supsystic plugin <= 1.5.5 - Broken Access Control vulnerability

cve-program ·

https://wordpress.org/plugins: ultimate-maps-by-supsystic

CVSS 3.1 6.5Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-97256Published

WordPress Page Builder by SiteOrigin plugin <= 2.36.0 - PHP Object Injection vulnerability

cve-program ·

https://wordpress.org/plugins: siteorigin-panels

CVSS 3.1 7.2Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-97265Published

WordPress JetEngine plugin <= 3.8.15.3 - Cross Site Scripting (XSS) vulnerability

cve-program ·

Vendor product: JetEngine

CVSS 3.1 6.5Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-97290Published

WordPress Photonic Gallery & Lightbox for Flickr, SmugMug & Others plugin <= 3.36 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: photonic

CVSS 3.1 7.1Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-97291Published

WordPress Schema & Structured Data for WP & AMP plugin <= 1.66 - PHP Object Injection vulnerability

cve-program ·

https://wordpress.org/plugins: schema-and-structured-data-for-wp

CVSS 3.1 8.8Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-100510Published

WordPress Post and Page Builder by BoldGrid plugin <= 1.27.14 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: post-and-page-builder

CVSS 3.1 7.1Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-100512Published

WordPress Nested Pages plugin <= 3.3.2 - PHP Object Injection vulnerability

cve-program ·

https://wordpress.org/plugins: wp-nested-pages

CVSS 3.1 9.8Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-102376Published

WordPress Branda plugin <= 3.4.32 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: branda-white-labeling

CVSS 3.1 7.1Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-102377Published

WordPress Photo Gallery by 10Web plugin <= 1.8.46 - PHP Object Injection vulnerability

cve-program ·

https://wordpress.org/plugins: photo-gallery

CVSS 3.1 8.8Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-102391Published

WordPress JetFormBuilder plugin <= 3.6.5.4 - Cross Site Scripting (XSS) vulnerability

cve-program ·

https://wordpress.org/plugins: jetformbuilder

CVSS 3.1 7.1Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-102392Published

WordPress Extra Product Options For WooCommerce | Custom Product Addons and Fields plugin <= 3.3.8 - PHP Object Injection vulnerability

cve-program ·

https://wordpress.org/plugins: woo-extra-product-options

CVSS 3.1 7.2Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-47489Published

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this vulnerability might lead to code execution, denial of service, …

cve-program ·

Vendor product: GeForce · Vendor product: RTX, Quadro, NVS · Vendor product: RTX, Quadro, NVS

CVSS 3.1 7.8Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-47575Published

NVIDIA GPU Display Driver for Windows contains a vulnerability in the display driver DIAG escape handler where a local unprivileged attacker may cause an integer overflow and out-of-bounds write. A successful exploit of this vulnerability m…

cve-program ·

Vendor product: GeForce · Vendor product: RTX, Quadro, NVS · Vendor product: GeForce

CVSS 3.1 7.8Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-47492Published

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an attacker can cause improper access control. A successful exploit of this vulnerability might lead to denial of service.

cve-program ·

Vendor product: GeForce · Vendor product: RTX, Quadro, NVS · Vendor product: GeForce

CVSS 3.1 5.5Source modified 30 Sep 2026Recorded 23 Oct 2026

CVE-2026-47506Published

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel-mode color transform path where excessive kernel stack use occurs when evaluating YCbCr420 display emulation. A successful exploit of this vulnerability might lead…

cve-program ·

Vendor product: GeForce · Vendor product: RTX, Quadro, NVS · Vendor product: GeForce

CVSS 3.1 5.5Source modified 30 Sep 2026Recorded 23 Oct 2026

A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.