CVE-2026-68830: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to disclose information locally...

PT-2026-87503

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Device Association Service. This issue allows an authorized attacker to elevate privileges locally on the system....

PT-2026-87472

Out-of-bounds read in Windows Device Health Attestation DHA allows an unauthorized attacker to disclose information over a network...

CVE-2026-69443: Out-of-bounds Read

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network...

CVE-2026-79602: Improper Restriction of Operations within the Bounds of a Memory Buffer

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

PT-2026-87359

Name of the Vulnerable Software and Affected Versions Windows Device Association Broker service affected versions not specified Description A use after free issue in the Windows Device Association Broker service allows an authorized attacker to elevate privileges over a network. Use after free is...

CVE-2026-69581: Use After Free

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-73022: Use After Free

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

Linux Distros Unpatched Vulnerability : CVE-2026-79602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen. CVE-2026-79602 Note that Nessus relies on the presence...

EulerOS 2.0 SP12 : util-linux (EulerOS-SA-2026-3392)

According to the versions of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libblkid library of util-linux. During nested partition probing, the BSD, Minix, Solaris x86, and UnixWare partition...

PT-2026-88106

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83940: Use After Free

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

PT-2026-87392

Name of the Vulnerable Software and Affected Versions Windows Universal Plug and Play UPnP Device Host affected versions not specified Description An issue in the Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to locally disclose private personal information to an...

CVE-2026-69711: Use After Free

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-77500: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

PT-2026-87957

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A release of an invalid pointer or reference in the Windows Device Association Service allows an authorized attacker to elevate privileges locally. This issue occur...

SUSE CVE-2026-80766

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: fix use-after-free of inrangetimer on remove uclogicremove cancels the pen in-range timer and then stops the device: timerdeletesync&drvdata-inrangetimer; hidhwstophdev; timerdeletesync only guarantees the timer is...

SUSE-SU-2026:23662-1 Security update for multipath-tools

This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failedwwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...

SUSE-SU-2026:23646-1 Security update for multipath-tools

This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failedwwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...

SUSE-SU-2026:23502-1 Security update for multipath-tools

This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failedwwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...