PT-2026-87464

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-87466

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A heap-based buffer overflow occurs in Windows Error Reporting, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

PT-2026-87478

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-87507

Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...

PT-2026-87488

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A heap-based buffer overflow occurs in Windows Error Reporting, which allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow is a...

PT-2026-87561

Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network...

PT-2026-87533

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-87614

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-87202

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An origin validation error allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there is no information about a newer version that contains a fi...

PT-2026-87232

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An authorized attacker can disclose sensitive information over a network due to the generation of error messages that contain sensitive data. Recommendations At the moment, there is no...

PT-2026-87308

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A heap-based buffer overflow occurs in Windows Error Reporting, which allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow is a...

PT-2026-88452

HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table form layout and the Bootstrap 2 and 3 wrappers splice each error string straight into the surrounding markup. Version 0.410000, the fix for CVE-2026-19872, escaped the equivalent...

PT-2026-88231

In WriteImageToDisk of runtime image.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

AlmaLinux 8 : xmlrpc-c (ALSA-2026:64772)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:64772 advisory. xmlrpc-c: XMLRPC-C Library: Cross-Site Scripting in error page component CVE-2026-15928 Tenable has extracted the preceding description block directly from the...

RHEL 8 : xmlrpc-c (RHSA-2026:64772)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:64772 advisory. XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a...

Linux Distros Unpatched Vulnerability : CVE-2026-19872

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message. The wrappers and...

Linux Distros Unpatched Vulnerability : CVE-2026-85485

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table form layout and the Bootstrap 2 and 3...

CVE-2026-86539

knowns through 0.33.0 contains a server-side request forgery vulnerability in the POST /api/embedding-models/test endpoint that issues outbound requests to caller-supplied destinations without validation. Attackers can enumerate internal hosts and cloud metadata endpoints by observing transport...

SUSE CVE-2026-80882

In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Ensure the ENOMEM error value is set when the input buffer allocation fails in tegraccmdoonereq...

SUSE CVE-2026-80888

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: drop dmabuf reference on foreign-fd prime import ttmprimefdtohandle returns -ENOSYS when the imported fd's dmabuf-ops do not match the ttmobjectdevice's ops, but does so without releasing the reference acquired by...