KLA91148 Multiple vulnerabilities in Microsoft Open Source Software

Multiple vulnerabilities were found in Microsoft Open Source Software. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Windows Subsystem for Linux WSL2 Kernel can...

CVE-2026-44641

Microsoft APM is an open-source, community-driven dependency manager for AI agents. Prior to 0.8.12, Microsoft APM normalizes marketplace plugins by copying plugin components referenced in plugin.json into .apm/. The manifest fields agents, skills, commands, and hooks are attacker-controlled, but...

EUVD-2026-30561

Microsoft APM: Symlinks under .apm/prompts/ and .apm/agents/ are dereferenced during apm install, copying host-local file contents into the project tree...

KLA90059 Multiple vulnerability in Microsoft Open Source Software

A remote code execution vulnerability was found in Microsoft Open Source Software. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2025-62220 Exploitation Public exploits exist for this vulnerability. Related products...

KLA89275 SUI vulnerability in Microsoft Open Source Software

A spoofing vulnerability was found in Microsoft Open Source Software. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2025-59288 Exploitation Public exploits exist for this vulnerability. Related products Playwright CVE list CVE-2025-59288 high KB...

KLA86591 PE vulnerability in Microsoft Open Source Software

An elevation of privilege vulnerability was found in Microsoft Open Source Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-53788 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Windows CVE list...

KLA77111 ACE vulnerabilities in Microsoft Open Source Software

Remote code execution vulnerabilities were found in Microsoft Open Source Software. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in TorchGeo can be exploited remotely to execute...

KLA20037 Multiple vulnerabilities in Microsoft Open Source Software

Multiple vulnerabilities were found in Microsoft Open Source Software. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in X.509 certificate verification can be...

KLA12170 RCE vulnerability in Microsoft Open Source Software

A remote code execution vulnerability was found in Microsoft Open Source Software. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-31200 Exploitation Public exploits exist for this vulnerability. Related products Yammer-Desktop-App CVE list...

KLA11690 Multiple vulnerabilities in Microsoft Open Source Software

Vulnerability in Application Inspector can be exploited remotely via script injection to execute arbitrary code. Original advisories CVE-2020-0872 Exploitation Related products Microsoft-Windows-10 CVE list CVE-2020-0872 high KB list Solution Install necessary updates from the KB section, that ar...