AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

Microsoft security advisories

2723 advisories · 2013 critical or high in 12 months · latest Oct 23

Advisories page

60 of 2,723 advisories

Medium 6.5Oct 23Protected environment values can be disclosed through declarative workflow control flowGHSA-4532-fhjf-wq2qfixed in 1.26.0Medium 5.4Oct 23Cross-session state and chat-message disclosure in reused .NET workflow executorsGHSA-8j78-92fm-c727fixed in 1.26.0Medium 6.5Oct 23Sensitive configuration values can appear in .NET declarative workflow expression errorsGHSA-f92h-h85c-p8w6fixed in 1.26.0Medium 6.5Oct 23Microsoft: observable discrepancyGHSA-68cw-g4g7-7h9ffixed in 1.26.0Medium 6.5Oct 23Case-variant workflow variables can bypass protected-value checks in .NET declarative workflowsGHSA-r8fg-8q6m-6c5mfixed in 1.26.0High 8.0Oct 13Microsoft SQL Server: stack buffer overflowCVE-2026-96956fixed in 14.0.2140.2 +7High 8.8Oct 13Microsoft SQL Server: heap buffer overflowCVE-2026-94512fixed in 14.0.2140.2 +7Medium 6.4Oct 13Microsoft SQL Server: heap buffer overflowCVE-2026-88085fixed in 14.0.2140.2 +7Medium 5.3Oct 13Microsoft SQL Server: out-of-bounds readCVE-2026-88086fixed in 15.0.2200.2 +5High 7.0Oct 13Microsoft SQL Server: integer overflowCVE-2026-88088fixed in 15.0.2200.2 +5Medium 6.7Oct 13Microsoft SQL Server: heap buffer overflowCVE-2026-88089fixed in 14.0.2140.2 +7High 7.7Oct 13Microsoft SQL Server: out-of-bounds readCVE-2026-88081fixed in 14.0.2140.2 +7High 7.0Oct 13Microsoft SQL Server: heap buffer overflowCVE-2026-88082fixed in 15.0.2200.2 +5High 7.5Oct 13Microsoft SQL Server: stack buffer overflowCVE-2026-88083fixed in 16.0.1210.3 +3Medium 5.3Oct 13Microsoft SQL Server: resource exhaustionCVE-2026-88084fixed in 15.0.2200.2 +1High 7.0Oct 13Microsoft SQL Server: heap buffer overflowCVE-2026-85919fixed in 15.0.2200.2 +5High 8.5Oct 13Microsoft SQL Server: heap buffer overflowCVE-2026-85886fixed in 14.0.2140.2 +7High 7.0Oct 13Microsoft SQL Server: use after freeCVE-2026-85876fixed in 15.0.2200.2 +5Medium 6.6Oct 13Microsoft SQL Server: heap buffer overflowCVE-2026-83945fixed in 16.0.1210.3 +3Medium 6.7Oct 13Microsoft SQL Server: heap buffer overflowCVE-2026-70189fixed in 14.0.2140.2 +7High 8.8Oct 13Microsoft SQL Server: unsafe deserializationCVE-2026-65674fixed in 15.0.2200.2 +5High 8.5Oct 13Microsoft SQL Server: heap buffer overflowCVE-2026-67625fixed in 14.0.2140.2 +7High 8.5Oct 13Microsoft SQL Server: heap buffer overflowCVE-2026-68883fixed in 14.0.2140.2 +7Medium 6.8Oct 13Microsoft SharePoint Server Subscription Edition: tamperingCVE-2026-97782fixed in 16.0.19725.20522High 8.8Oct 13Microsoft Windows Shell: command injectionCVE-2026-96951fixed in 154.0.4258.62 +10High 7.5Oct 13Microsoft Windows: out-of-bounds readCVE-2026-96866fixed in 10.0.14393.9612 +5High 7.5Oct 13Microsoft Windows: out-of-bounds readCVE-2026-96861fixed in 10.0.14393.9612 +5High 7.8Oct 13Microsoft Windows Spaceport.sys: out-of-bounds readCVE-2026-96862fixed in 10.0.14393.9612 +9Medium 6.8Oct 13Microsoft Windows Storage Port Driver: heap buffer overflowCVE-2026-96863fixed in 10.0.22631.7652 +5Critical 9.8Oct 13Microsoft Failover Cluster Virtual Driver: double freeCVE-2026-96864fixed in 10.0.14393.9612 +5Medium 5.6Oct 13Microsoft Windows Secure Kernel Mode: system information exposureCVE-2026-96865fixed in 10.0.14393.9612 +8Medium 5.5Oct 13Microsoft Windows Security Account Manager: missing authenticationCVE-2026-96858fixed in 10.0.19044.7807 +8Medium 5.5Oct 13Microsoft Windows Imaging Component: out-of-bounds readCVE-2026-96859fixed in 10.0.14393.9612 +9Medium 5.5Oct 13Microsoft Windows USB Print Driver: out-of-bounds readCVE-2026-96860fixed in 10.0.14393.9612 +9Critical 9.8Oct 13Microsoft Windows: out-of-bounds writeCVE-2026-96219fixed in 10.0.17763.9376 +8High 8.8Oct 13Microsoft Windows Raw Image Extension: heap buffer overflowCVE-2026-96202fixed in 154.0.4258.37 +1Medium 6.5Oct 13Microsoft Windows Subsystem for Linux (WSL2): uninitialized resourceCVE-2026-96206fixed in 3.0.1High 7.8Oct 13Microsoft Desktop Window Manager: use after freeCVE-2026-96108fixed in 10.0.17763.9376 +8High 7.0Oct 13Microsoft Windows: double freeCVE-2026-95943fixed in 10.0.22631.7652 +5Medium 5.5Oct 13Microsoft Digest Authentication: out-of-bounds readCVE-2026-88158fixed in 10.0.14393.9612 +9High 8.8Oct 13Microsoft Windows: use after freeCVE-2026-88159fixed in 10.0.14393.9612 +9High 7.8Oct 13Microsoft Windows: use after freeCVE-2026-88152fixed in 10.0.14393.9612 +9High 8.8Oct 13Microsoft OpenSSH for Windows: heap buffer overflowCVE-2026-88157fixed in 10.0.17763.9376 +8High 7.0Oct 13Microsoft Windows: race conditionCVE-2026-88146fixed in 10.0.17763.9376 +8High 7.8Oct 13Microsoft Windows: heap buffer overflowCVE-2026-88147fixed in 10.0.14393.9612 +9High 7.0Oct 13Microsoft Windows Ancillary Function Driver for WinSock: double freeCVE-2026-88149fixed in 10.0.14393.9612 +9High 8.8Oct 13Microsoft WebDAV: remote code executionCVE-2026-88136fixed in 10.0.14393.9612 +9Medium 6.5Oct 13Microsoft WebDAV: exposed filesCVE-2026-88137fixed in 10.0.14393.9612 +9High 7.0Oct 13Microsoft Windows Kernel: use after freeCVE-2026-88139fixed in 10.0.26100.9711 +4Medium 5.5Oct 13Microsoft Windows Key Storage Provider: out-of-bounds readCVE-2026-88140fixed in 10.0.14393.9612 +8High 7.0Oct 13Microsoft Windows Kernel: use after freeCVE-2026-88141fixed in 10.0.22631.7652 +6High 8.8Oct 13Microsoft Windows: use after freeCVE-2026-88142fixed in 10.0.14393.9612 +9Medium 6.7Oct 13Microsoft Windows Storage Spaces Controller: heap buffer overflowCVE-2026-88143fixed in 10.0.14393.9612 +8High 7.8Oct 13Microsoft Windows Portable Device Enumerator Service: improper authorizationCVE-2026-88133fixed in 10.0.14393.9612 +9High 7.8Oct 13Microsoft Windows Kernel: use after freeCVE-2026-88134fixed in 10.0.14393.9612 +9High 7.8Oct 13Microsoft WebDAV: improper access controlCVE-2026-88135fixed in 10.0.14393.9612 +9High 7.0Oct 13Microsoft Windows Installer: use after freeCVE-2026-88124fixed in 10.0.14393.9612 +9High 7.8Oct 13Microsoft WebDAV: privilege escalationCVE-2026-88126fixed in 10.0.14393.9612 +9High 7.0Oct 13Microsoft Windows SMB Server: use after freeCVE-2026-88127fixed in 10.0.14393.9612 +8High 7.8Oct 13Microsoft Windows DWM Core Library: heap buffer overflowCVE-2026-88128fixed in 10.0.17763.9376 +8
About Microsoft

Security advisories Microsoft publishes for its own products.

www.microsoft.com/en-us/msrc/technical-security-notificationsMicrosoft

Microsoft elsewhere on Ibis: Acquisitions · Quarterly · Paydays · Releases · Repos · TechConf · Trending