27741 matches found
PT-2026-32862
Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A double free issue in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. A double free occurs when a program attempts to fre...
PT-2026-32786
Name of the Vulnerable Software and Affected Versions Desktop Window Manager affected versions not specified Description A use after free issue allows an authorized attacker to elevate privileges locally. Use after free occurs when an application continues to use a pointer after it has been freed...
PT-2026-32843
Name of the Vulnerable Software and Affected Versions Microsoft 365 Apps for Enterprise versions 16.0.1 through 16.0.1 Description An out-of-bounds read in Microsoft Office Excel allows an unauthorized local attacker to disclose sensitive information. This occurs when a user opens a malicious Exc...
PT-2026-32823
🪟 CVE-2026-32153 is “Speech Runtime” but the real threat is Windows’ EoP roulette. When Microsoft says confidence = high, you patch before your users say “hello” to SYSTEM. https://t.co/uMdtsmG92G SpeechRuntime LocalPrivilegeEscalation SecurityUpdateGuide WindowsCve...
PT-2026-32822
Name of the Vulnerable Software and Affected Versions Desktop Window Manager affected versions not specified Description A use after free issue allows an authorized attacker to elevate privileges locally. Use after free is a condition where a program continues to use a pointer after it has been...
PT-2026-32863
Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description Improper access control in the Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...
PT-2026-32845
Name of the Vulnerable Software and Affected Versions Microsoft 365 Apps for Enterprise versions 16.0.1 through 16.0.1 Description A use-after-free issue in Microsoft Office allows an unauthorized attacker to execute arbitrary code locally or remotely. This occurs when a user is tricked into...
PT-2026-32794
CVE-2026-32068 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privilege… https://t.co/txSwKIdsD7...
PT-2026-32716
Name of the Vulnerable Software and Affected Versions Windows Boot Loader affected versions not specified Description Reliance on untrusted inputs in a security decision allows an authorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information abou...
PT-2026-32761
🪟 Projected File System EoP CVE-2026-26184 — because nothing says “safe sharing” like letting Windows privilege itself. Patch now: thin details = attackers fill in the blanks. https://t.co/6drID0tklA WindowsSecurity PrivilegeEscalation ProjectedFileSystem Cve202626184 https://t.co/tM3GbnJNon...
PT-2026-32804
Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description A use after free issue in the Windows Projected File System allows an authorized attacker to elevate privileges locally. Use after free is a condition where a program...
PT-2026-32732
🪟 MSRC “confidence signal” for CVE-2026-26152: Microsoft says “we’re pretty sure” crypto can EoP… aka update before you guess wrong. Windows admins: as usual, trust the patch, not the vibes. https://t.co/hiLCcbJJJU WindowsSecurity LocalPrivilegeEscalation Cve202626152 https://t.co/cgNnN74y09...
PT-2026-32789
Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description A race condition occurs due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate privileges...
Ubuntu 22.04 LTS / 24.04 LTS / 25.10 : xdg-dbus-proxy vulnerability (USN-8167-1)
The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by a vulnerability as referenced in the USN-8167-1 advisory. It was discovered that xdg-dbus-proxy incorrectly handled eavesdropping in policy rules. A local attacker could possibly use this issue to...
PT-2026-32793
Name of the Vulnerable Software and Affected Versions Windows GDI affected versions not specified Description An out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs when a program reads dat...
PT-2026-32743
Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A double free issue in Windows Shell allows an authorized attacker to elevate privileges locally, enabling a user to gain administrative access to the system. Recommendations At the...
PT-2026-32738
Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Licensing Service affected versions not specified Description A missing authentication for a critical function in the Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally,...
PT-2026-32717
CVE-2026-20806 Access of resource using incompatible type 'type confusion' in Windows COM allows an authorized attacker to disclose information locally. https://t.co/pPGYfQ4IPk...
USN-8163-2: Linux kernel (Azure) vulnerabilities
Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...
USN-8163-2 linux-azure vulnerabilities
Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information kernel memory, local...