PT-2026-70982

Name of the Vulnerable Software and Affected Versions Parallels RAS Client affected versions not specified Description A local privilege escalation issue exists in the RAS RDP Backend Service due to an exposed dangerous function. An attacker who has already obtained the ability to execute...

PT-2026-70731

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

PT-2026-70703

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description Improper access control in the Windows Cross Device Service allows an authorized attacker to elevate privileges locally. The issue occurs because a standard user can create the...

PT-2026-70583

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A use-after-free condition in the Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occur...

RockyLinux 10 : nodejs-nodemon (RLSA-2026:52841)

The remote RockyLinux 10 host has a package installed that is affected by a vulnerability as referenced in the RLSA-2026:52841 advisory. brace-expansion: brace-expansion: Denial of Service via unbounded intermediate arrays CVE-2026-69152 Tenable has extracted the preceding description block...

Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

Microsoft Windows Ancillary Function Driver for WinSock contains a use-after-free vulnerability that allows an authorized attacker to elevate privileges locally...

PT-2026-70456

Name of the Vulnerable Software and Affected Versions Winlogon affected versions not specified Description A use-after-free condition in Winlogon allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application continues to u...

PT-2026-70641

Name of the Vulnerable Software and Affected Versions Microsoft Office Access affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70738

Name of the Vulnerable Software and Affected Versions Windows Package Manager affected versions not specified Description Improper privilege management allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that...

PT-2026-70673

Name of the Vulnerable Software and Affected Versions Windows Autopilot affected versions not specified Description A use-after-free condition in Windows Autopilot enables an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...

PT-2026-70845

A vulnerability was found in Open5GS up to 2.7.1. This affects the function hss ogs diam s6a air cb/hss ogs diam s6a ulr cb of the file src/hss/hss-s6a-path.c of the component Diameter S6a Interface. Performing a manipulation of the argument os.len results in stack-based buffer overflow. It is...

PT-2026-70942

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme s6a subscription data from avp of the file src/mme/mme-fd-path.c of the component Diameter S6a Interface. Executing a manipulation of the argument msisdn len can lead to heap-based buffer overflow. ...

PT-2026-70734

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an unauthorized...

PT-2026-70509

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use-after-free condition in the Windows Kernel allows an authorized attacker to elevate privileges locally, enabling them to affect the system. Use-after-free is a memory corruption...

PT-2026-70676

Name of the Vulnerable Software and Affected Versions Windows Autopilot affected versions not specified Description A use-after-free condition in Windows Autopilot enables an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...

PT-2026-70696

Improper input validation in Power BI allows an authorized attacker to execute code over a network...

PT-2026-70571

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An out-of-bounds write occurs in .NET, which could allow an unauthorized attacker to execute code locally. An out-of-bounds write is a memory corruption error that happens when a program writes...

PT-2026-70474

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A use-after-free condition in Windows Win32K allows an authorized attacker to elevate privileges locally. A use-after-free is a memory corruption issue that occurs when an application...

PT-2026-70558

Name of the Vulnerable Software and Affected Versions Active Directory Certificate Services affected versions not specified Description A use after free issue in Active Directory Certificate Services allows an authorized attacker to execute arbitrary code over a network, which can affect the...

PT-2026-70511

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description An integer overflow or wraparound occurs in the Windows Projected File System, which allows an authorized attacker to elevate privileges locally. Recommendations At the...