PT-2026-88013

This Microsoft Patch Tuesday, among with the historical 974 ! bugs patched, I contributed three. - Microsoft Word Remote Code Execution Vulnerability CVE-2026-78510 https://t.co/7UyCIwJTji - Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-78509 https://t.co/Nn3oKfDPL4 -...

PT-2026-88229

Android’s September 2026 security update fixed 180 issues. The one that stands out is CVE-2026-28662: Wi-Fi related memory corruption that can lead to remote code execution with no user interaction and no additional privileges. Still the class of bug that turns a nearby attacker into a device own...

Important: redis security, bug fix, and enhancement update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

PT-2026-87982

Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

UBUNTU-CVE-2026-69522

This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution...

KB5122871: Windows Server 2025 Security Update (September 2026)

The remote Windows host is missing security update 5122871. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

Android Security Bulletin—September 2026Stay organized with collectionsSave and categorize content based on your preferences.

This Android Security Bulletin contains details of security vulnerabilities that affect Android devices. Security patch levels of 2026-09-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Source code patches...

KB5124012: Windows 11 Version 26H1 Security Update (September 2026)

The remote Windows host is missing security update 5124012. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

NewStart CGSL MAIN 7.02 : gstreamer1 Multiple Vulnerabilities (NS-SA-2026-0093)

The remote NewStart CGSL host, running version MAIN 7.02, has gstreamer1 packages installed that are affected by multiple vulnerabilities: - GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code ...

PT-2026-88014

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

RHEL 10 : valkey (RHSA-2026:64796)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64796 advisory. Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists,...

PT-2026-87890

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

KB5122878: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (September 2026)

The remote Windows host is missing security update 5122878. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

KLA91264 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability can be...

KLA91267 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Dynamics 365...

KLA91263 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...

KLA91261 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution...

KLA91270 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user...

KB5123065: Windows Server 2012 Security Update (September 2026)

The remote Windows host is missing security update 5123065. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

AlmaLinux 8 : redis:6 (ALSA-2026:64823)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64823 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Arbitrary code execution via TLS pending-data list...