PT-2026-88275

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope i...

PT-2026-87891

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...

CVE-2026-69792: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to bypass a security feature locally...

CVE-2026-77111: Incorrect Authorization

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to availability...

valkey security, bug fix, and enhancement update

8.0.11-1 - Rebase to 8.0.11 for CVE-2026-56684 CVE-2026-63639 CVE-2026-66373 in redis...

CVE-2026-81997: Incorrect Authorization

Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victi...

OPENSUSE-SU-2026:11717-1 git-bug-0.10.1-7.1 on GA media

These are all security issues fixed in the git-bug-0.10.1-7.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11715-1 corosync-3.1.10-5.1 on GA media

These are all security issues fixed in the corosync-3.1.10-5.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-87209

New original discovery vuln disclosure: CVE-2026-62801 A malicious PowerShell Remoting endpoint can write arbitrary files anywhere on a connecting user's machine — escalable to remote code execution. If an attacker can get you to Copy-Item from their endpoint, they own your file system. Affects a...

PT-2026-88410

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue require...

CVE-2026-69277: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

CVE-2026-69365: Out-of-bounds Read

Out-of-bounds read in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges over a network...

CVE-2026-69793: Improper Validation of Consistency within Input

Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-81376: Incomplete Comparison with Missing Factors

Incomplete comparison with missing factors in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

Debian dla-4777 : ata-modules-6.1.0-52-armmp-di - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4777 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4777-1 [email protected]...

KLA91272 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, read local files, spoof user interface. Below is a complete...

CVE-2026-81378: Interpretation Conflict

Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-81356: Inconsistent Interpretation of HTTP Requests

Inconsistent interpretation of http requests 'http request/response smuggling' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-77774: Incorrect Authorization

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope i...

PT-2026-87025

Improper Privilege Management vulnerability in Horizon Security Analyzer formerly AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation and Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that ...