AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Companies

Microsoft security advisories

2727 advisories across Semantic Kernel, DeepSpeed, qlib, Microsoft

Company profile
Medium 6.5Oct 23Protected environment values can be disclosed through declarative workflow control flowMicrosoftGHSA-4532-fhjf-wq2qfixed in 1.26.0Medium 5.4Oct 23Cross-session state and chat-message disclosure in reused .NET workflow executorsMicrosoftGHSA-8j78-92fm-c727fixed in 1.26.0Medium 6.5Oct 23Sensitive configuration values can appear in .NET declarative workflow expression errorsMicrosoftGHSA-f92h-h85c-p8w6fixed in 1.26.0Medium 6.5Oct 23Microsoft: observable discrepancyMicrosoftGHSA-68cw-g4g7-7h9ffixed in 1.26.0Medium 6.5Oct 23Case-variant workflow variables can bypass protected-value checks in .NET declarative workflowsMicrosoftGHSA-r8fg-8q6m-6c5mfixed in 1.26.0High 8.0Oct 13Microsoft SQL Server: stack buffer overflowSQL ServerCVE-2026-96956fixed in 14.0.2140.2 +7High 8.8Oct 13Microsoft SQL Server: heap buffer overflowSQL ServerCVE-2026-94512fixed in 14.0.2140.2 +7Medium 6.4Oct 13Microsoft SQL Server: heap buffer overflowSQL ServerCVE-2026-88085fixed in 14.0.2140.2 +7Medium 5.3Oct 13Microsoft SQL Server: out-of-bounds readSQL ServerCVE-2026-88086fixed in 15.0.2200.2 +5High 7.0Oct 13Microsoft SQL Server: integer overflowSQL ServerCVE-2026-88088fixed in 15.0.2200.2 +5Medium 6.7Oct 13Microsoft SQL Server: heap buffer overflowSQL ServerCVE-2026-88089fixed in 14.0.2140.2 +7High 7.7Oct 13Microsoft SQL Server: out-of-bounds readSQL ServerCVE-2026-88081fixed in 14.0.2140.2 +7High 7.0Oct 13Microsoft SQL Server: heap buffer overflowSQL ServerCVE-2026-88082fixed in 15.0.2200.2 +5High 7.5Oct 13Microsoft SQL Server: stack buffer overflowSQL ServerCVE-2026-88083fixed in 16.0.1210.3 +3Medium 5.3Oct 13Microsoft SQL Server: resource exhaustionSQL ServerCVE-2026-88084fixed in 15.0.2200.2 +1High 7.0Oct 13Microsoft SQL Server: heap buffer overflowSQL ServerCVE-2026-85919fixed in 15.0.2200.2 +5High 8.5Oct 13Microsoft SQL Server: heap buffer overflowSQL ServerCVE-2026-85886fixed in 14.0.2140.2 +7High 7.0Oct 13Microsoft SQL Server: use after freeSQL ServerCVE-2026-85876fixed in 15.0.2200.2 +5Medium 6.6Oct 13Microsoft SQL Server: heap buffer overflowSQL ServerCVE-2026-83945fixed in 16.0.1210.3 +3Medium 6.7Oct 13Microsoft SQL Server: heap buffer overflowSQL ServerCVE-2026-70189fixed in 14.0.2140.2 +7High 8.8Oct 13Microsoft SQL Server: unsafe deserializationSQL ServerCVE-2026-65674fixed in 15.0.2200.2 +5High 8.5Oct 13Microsoft SQL Server: heap buffer overflowSQL ServerCVE-2026-67625fixed in 14.0.2140.2 +7High 8.5Oct 13Microsoft SQL Server: heap buffer overflowSQL ServerCVE-2026-68883fixed in 14.0.2140.2 +7Medium 6.8Oct 13Microsoft SharePoint Server Subscription Edition: tamperingMicrosoft SharePoint Server Subscription EditionCVE-2026-97782fixed in 16.0.19725.20522High 8.8Oct 13Microsoft Windows Shell: command injectionWindows ShellCVE-2026-96951fixed in 154.0.4258.62 +10High 7.5Oct 13Microsoft Windows: out-of-bounds readWindowsCVE-2026-96866fixed in 10.0.14393.9612 +5High 7.5Oct 13Microsoft Windows: out-of-bounds readWindowsCVE-2026-96861fixed in 10.0.14393.9612 +5High 7.8Oct 13Microsoft Windows Spaceport.sys: out-of-bounds readWindows Spaceport.sysCVE-2026-96862fixed in 10.0.14393.9612 +9Medium 6.8Oct 13Microsoft Windows Storage Port Driver: heap buffer overflowWindows Storage Port DriverCVE-2026-96863fixed in 10.0.22631.7652 +5Critical 9.8Oct 13Microsoft Failover Cluster Virtual Driver: double freeMicrosoft Failover Cluster Virtual DriverCVE-2026-96864fixed in 10.0.14393.9612 +5Medium 5.6Oct 13Microsoft Windows Secure Kernel Mode: system information exposureWindows Secure Kernel ModeCVE-2026-96865fixed in 10.0.14393.9612 +8Medium 5.5Oct 13Microsoft Windows Security Account Manager: missing authenticationWindows Security Account ManagerCVE-2026-96858fixed in 10.0.19044.7807 +8Medium 5.5Oct 13Microsoft Windows Imaging Component: out-of-bounds readWindows Imaging ComponentCVE-2026-96859fixed in 10.0.14393.9612 +9Medium 5.5Oct 13Microsoft Windows USB Print Driver: out-of-bounds readWindows USB Print DriverCVE-2026-96860fixed in 10.0.14393.9612 +9Critical 9.8Oct 13Microsoft Windows: out-of-bounds writeWindowsCVE-2026-96219fixed in 10.0.17763.9376 +8High 8.8Oct 13Microsoft Windows Raw Image Extension: heap buffer overflowWindows Raw Image ExtensionCVE-2026-96202fixed in 154.0.4258.37 +1Medium 6.5Oct 13Microsoft Windows Subsystem for Linux (WSL2): uninitialized resourceWindows Subsystem for Linux (WSL2)CVE-2026-96206fixed in 3.0.1High 7.8Oct 13Microsoft Desktop Window Manager: use after freeDesktop Window ManagerCVE-2026-96108fixed in 10.0.17763.9376 +8High 7.0Oct 13Microsoft Windows: double freeWindowsCVE-2026-95943fixed in 10.0.22631.7652 +5Medium 5.5Oct 13Microsoft Digest Authentication: out-of-bounds readMicrosoft Digest AuthenticationCVE-2026-88158fixed in 10.0.14393.9612 +9High 8.8Oct 13Microsoft Windows: use after freeWindowsCVE-2026-88159fixed in 10.0.14393.9612 +9High 7.8Oct 13Microsoft Windows: use after freeWindowsCVE-2026-88152fixed in 10.0.14393.9612 +9High 8.8Oct 13Microsoft OpenSSH for Windows: heap buffer overflowOpenSSH for WindowsCVE-2026-88157fixed in 10.0.17763.9376 +8High 7.0Oct 13Microsoft Windows: race conditionWindowsCVE-2026-88146fixed in 10.0.17763.9376 +8High 7.8Oct 13Microsoft Windows: heap buffer overflowWindowsCVE-2026-88147fixed in 10.0.14393.9612 +9High 7.0Oct 13Microsoft Windows Ancillary Function Driver for WinSock: double freeWindows Ancillary Function Driver for WinSockCVE-2026-88149fixed in 10.0.14393.9612 +9High 8.8Oct 13Microsoft WebDAV: remote code executionWebDAVCVE-2026-88136fixed in 10.0.14393.9612 +9Medium 6.5Oct 13Microsoft WebDAV: exposed filesWebDAVCVE-2026-88137fixed in 10.0.14393.9612 +9High 7.0Oct 13Microsoft Windows Kernel: use after freeWindows KernelCVE-2026-88139fixed in 10.0.26100.9711 +4Medium 5.5Oct 13Microsoft Windows Key Storage Provider: out-of-bounds readWindows Key Storage ProviderCVE-2026-88140fixed in 10.0.14393.9612 +8High 7.0Oct 13Microsoft Windows Kernel: use after freeWindows KernelCVE-2026-88141fixed in 10.0.22631.7652 +6High 8.8Oct 13Microsoft Windows: use after freeWindowsCVE-2026-88142fixed in 10.0.14393.9612 +9Medium 6.7Oct 13Microsoft Windows Storage Spaces Controller: heap buffer overflowWindows Storage Spaces ControllerCVE-2026-88143fixed in 10.0.14393.9612 +8High 7.8Oct 13Microsoft Windows Portable Device Enumerator Service: improper authorizationWindows Portable Device Enumerator ServiceCVE-2026-88133fixed in 10.0.14393.9612 +9High 7.8Oct 13Microsoft Windows Kernel: use after freeWindows KernelCVE-2026-88134fixed in 10.0.14393.9612 +9High 7.8Oct 13Microsoft WebDAV: improper access controlWebDAVCVE-2026-88135fixed in 10.0.14393.9612 +9High 7.0Oct 13Microsoft Windows Installer: use after freeWindows InstallerCVE-2026-88124fixed in 10.0.14393.9612 +9High 7.8Oct 13Microsoft WebDAV: privilege escalationWebDAVCVE-2026-88126fixed in 10.0.14393.9612 +9High 7.0Oct 13Microsoft Windows SMB Server: use after freeWindows SMB ServerCVE-2026-88127fixed in 10.0.14393.9612 +8High 7.8Oct 13Microsoft Windows DWM Core Library: heap buffer overflowWindows DWM Core LibraryCVE-2026-88128fixed in 10.0.17763.9376 +8

The newest 60. Each project page has the full list.

About Microsoft

Microsoft Corporation is an American multinational technology company headquartered in Redmond, Washington.

Elsewhere on Ibis: Acquisitions · Quarterly · Paydays · Releases · Repos · TechConf · Trending