CVE-2026-70071: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally...

CVE-2026-97820: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-70201: Out-of-bounds Read

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally...

CVE-2026-97834: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CentOS Linux 8 [TuxCare] Security Update: httpd / httpd-devel / httpd-filesystem / httpd-manual / httpd-tools / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1791914243)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1791914243 advisory. - Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects from CGI programs ...

MiracleLinux 8 : httpd:2.4 bug fix and enhancement update (AXBA:2026-2033:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXBA:2026-2033:01 advisory. - An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures 30 days in default configurations, to the backoff time...

KB5126836: Windows Server 2012 R2 Security Update (October 2026)

The remote Windows host is missing security update 5126836. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

Security Updates for Microsoft Office Online Server (October 2026)

The Microsoft Office Online Server or Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-83635: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network...

KB5126651: Windows 10 version 1809 / Windows Server 2019 Security Update (October 2026)

The remote Windows host is missing security update 5126651. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

KB5126646: Windows Server 2025 Security Update (October 2026)

The remote Windows host is missing security update 5126646. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...

CVE-2026-96956: Stack-based Buffer Overflow

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

Microsoft SQL Server: CVE-2026-96956: SQL Server Elevation of Privilege Vulnerability

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CentOS Linux 6 [TuxCare] Security Update: httpd / httpd-devel / httpd-manual / httpd-tools / mod_ssl (CENTOS6:CLSA-2026:1791487835)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1791487835 advisory. - Stack-based buffer overflow in modvhostalias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote...

ALSA-2026:82015 Important: xorg-x11-server security update

X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fixes: xorg-x11-server: xorg-x11-server: Privilege escalation via crafted RandR provider property requests...

Oracle Linux 9 : xorg-x11-server (ELSA-2026-82015)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-82015 advisory. 1.20.11-34.4 - CVE fix for: CVE-2026-88812, CVE-2026-93521, CVE-2026-93523 Resolves: https://redhat.atlassian.net/browse/RHEL-278161 Resolves:...

KB5126835: Windows Server 2012 Security Update (October 2026)

The remote Windows host is missing security update 5126835. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Erlang vulnerabilities (USN-8901-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8901-1 advisory. Wander Nauta discovered that Erlang incorrectly handled absolute paths when...

PT-2026-112339

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Server-side request forgery SSRF allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where a server is tricked into making requests to an...

KB5126655: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (October 2026)

The remote Windows host is missing security update 5126655. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...