Security Update for Microsoft PowerPoint Products (August 2026)

The Microsoft PowerPoint Products are missing a security update. They are, therefore, affected by an information disclosure vulnerability. Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. Note that Nessus has not tested for this...

RockyLinux 8 : kernel (RLSA-2026:52765)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:52765 advisory. kernel: iio: event: Fix event FIFO reset race CVE-2026-64496 Tenable has extracted the preceding description block directly from the RockyLinux security advisory...

Linux Distros Unpatched Vulnerability : CVE-2026-73146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-r2gm-p682-3mpm: svxreflector: use-after-free via reentrant client deletion CVE-2026-73146 Note that Nessus...

AMD Power Design Manager (PDM) Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2025-8087| A DLL hijacking vulnerability within AMD Power Design Manager can allow a malicious local attacker to escalate privileges during uninstallation potentially resulting in arbitrar...

AMD Ryzen™ Master Vulnerability

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2025-54512| A DLL hijacking vulnerability within the AMD Ryzen™ Master installation may allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary co...

PT-2026-70533

Name of the Vulnerable Software and Affected Versions RPC Runtime affected versions not specified Description A heap-based buffer overflow in the RPC Runtime allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs...

PT-2026-70699

Deserialization of untrusted data in Microsoft Dynamics 365 on-premises allows an authorized attacker to execute code over a network...

Photon OS 5.0: Keepalived PHSA-2026-5.0-90-0921

An update of the keepalived package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0921. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Mariadb PHSA-2025-5.0-91-0722

An update of the mariadb package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0722. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Strongswan PHSA-2026-5.0-91-0802

An update of the strongswan package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0802. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Sudo PHSA-2025-5.0-92-0544

An update of the sudo package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-92-0544. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux Distros Unpatched Vulnerability : CVE-2026-68252

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdgpu/sdma7.0: replace BUGON with WARNON There's no need to crash the kernel for these cases. cherry picked from commit...

Photon OS 5.0: Wireshark PHSA-2025-5.0-91-0537

An update of the wireshark package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0537. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Samba PHSA-2023-5.0-91-0160

An update of the samba package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0160. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Openssh PHSA-2025-5.0-91-0687

An update of the openssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0687. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Systemd PHSA-2026-5.0-91-0819

An update of the systemd package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-91-0819. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

EUVD-2026-54225

Contiki-NG's DNS/mDNS resolver skipname in os/services/resolv/resolv.c walks DNS wire-format name labels with no packet-boundary check, and the caller in newdata invokes it in a loop iterating nquestions times from the attacker-controlled DNS header before validating the transaction ID. An attack...

CVE-2026-5856

Contiki-NG's DNS/mDNS resolver skipname in os/services/resolv/resolv.c walks DNS wire-format name labels with no packet-boundary check, and the caller in newdata invokes it in a loop iterating nquestions times from the attacker-controlled DNS header before validating the transaction ID. An attack...

CVE-2026-70635

TimescaleDB 2.29.1 contains an out-of-bounds read in the bulk text dictionary decompression path (Simple8b selector-11 stored as signed int16) that can cause query-result integrity failures or backend crashes. Exploitation requires direct DML access to a non-frozen physical compressed hypertable ...

CVE-2026-55979

An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to invoke CatchPulse functions. This is limited to operations that enforce more restrictive security policies...