CVE-2026-97821: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-67626: Uncontrolled Resource Consumption

Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-14909: Generation of Error Message Containing Sensitive Information

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure vulnerability that allows an authenticated attacker to obtain sensitive information when restConnector-2.0 is enbabled...

CVE-2026-14532: Integer Overflow or Wraparound

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception...

CVE-2026-83771: Use After Free

Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network...

PT-2026-112366

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

PT-2026-113431

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server 2019 affected versions not specified Microsoft SQL Server 2022 affected versions not specified Microsoft SQL Server 2025 affected versions not specified Description An authenticated attacker with low privileges can execute...

CVE-2026-70279: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-97832: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

PT-2026-113466

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A stack-based buffer overflow allows an authorized attacker to elevate privileges over a network. A stack-based buffer overflow occurs when a program writes more data to a buffer located o...

CVE-2026-100222: Heap-based Buffer Overflow

Heap-based buffer overflow in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...

PT-2026-111976

Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description Incorrect default permissions in the service allow an authorized attacker to elevate privileges locally, which enables them to affect the system. Recommendations At the...

MiracleLinux 8 : httpd:2.4 bug fix and enhancement update (AXBA:2026-2033:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXBA:2026-2033:01 advisory. - An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures 30 days in default configurations, to the backoff time...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Apache HTTP Server vulnerabilities (USN-8898-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8898-1 advisory. It was discovered that Apache HTTP Server's modrewrite module incorrectly handled...

KB5127648: Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 Version 26H2 Security Update (October 2026)

The remote Windows host is missing security update 5127648. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...

PT-2026-113263

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-88127: Use After Free

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally...

CVE-2026-85803: Use After Free

Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85803: Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability

Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...

CVE-2026-70071: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally...