Known Vulnerabilities for Data Engine by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Data Engine" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-111450 json | Wheels through 4.1.1 derives its default production error-email address from the Host header of the request that starts the a... | Not Provided | 2026-10-16 | 2026-10-19 |
| CVE-2026-110812 json | Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenti... | Not Provided | 2026-10-15 | 2026-10-16 |
| CVE-2026-110735 json | Godot Engine through 4.7.2 has a heap out-of-bounds write in the binary resource loader (core/io/resource_format_binary.cpp, ... | Not Provided | 2026-10-14 | 2026-10-20 |
| CVE-2026-109433 json | Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the Cockpit webapp ... | Not Provided | 2026-10-19 | 2026-10-19 |
| CVE-2026-108263 json | Astron Agent is an agentic workflow platform for building and running AI agents. Prior to 1.1.2, the default workflow code-no... | Not Provided | 2026-10-09 | 2026-10-13 |
| CVE-2026-107352 json | Missing authorization checks in Amazon Athena engine version 3 request handling could have allowed an authenticated user to r... | Not Provided | 2026-10-07 | 2026-10-11 |
| CVE-2026-107175 json | MISP contains a defect in its event save workflow that prevents the correlation engine from recalculating correlations when a... | Not Provided | 2026-10-07 | 2026-10-07 |
| CVE-2026-106120 json | LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript. Prior to 10.27.2, enabling ownPropertyOnl... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-103764 json | Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows una... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-101903 json | Axios is a promise-based HTTP client for the browser and Node.js. From 1.16.1 until 1.20.0, the RFC 2397 regular expression a... | Not Provided | 2026-09-28 | 2026-09-28 |