Windows Bind Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

Windows Bind Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

Microsoft Brokering File System Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally...

Microsoft Brokering File System Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-19391 Insights-core: insights-core: incomplete credential redaction exposes sssd bind passwords and pacemaker fence credentials in uploaded archives

A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows SSSD LDAP bind passwords ldapdefaultauthtok and Pacemaker fence device credentials to be included in cleartext in archives uploaded to...

Linux Distros Unpatched Vulnerability : CVE-2026-19391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows...

CVE-2026-61927: Use After Free

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-73281: Incorrect Resource Transfer Between Spheres

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the [email protected] extension...

PT-2026-70485

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Bind Filter Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based...

PT-2026-70452

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description A use-after-free condition in the Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

CVE-2026-62705: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

PT-2026-70446

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description A use-after-free condition in the Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

PT-2026-70469

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description A race condition occurs in the Windows Bind Filter Driver due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate...

PT-2026-70883

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.5 Description A misinteraction between agent locking and the [email protected] extension in ssh-agent allows certain operations intended only for local use to be performed remotely. This occurs because a...

CVE-2026-61934: Use After Free

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

Updated bind packages fix security vulnerabilities

Updated bind packages fix security vulnerabilities: Incorrect acceptance of NSEC3 records. CVE-2026-10723 Key Record using PRIVATEDNS algorithm may lead to unexpected exit. CVE-2026-10822 Potential wildcard CNAME RPZ policy bypass. CVE-2026-11331 Unnecessary validation of DNSSEC signed records...

MGASA-2026-0331 Updated bind packages fix security vulnerabilities

Updated bind packages fix security vulnerabilities: Incorrect acceptance of NSEC3 records. CVE-2026-10723 Key Record using PRIVATEDNS algorithm may lead to unexpected exit. CVE-2026-10822 Potential wildcard CNAME RPZ policy bypass. CVE-2026-11331 Unnecessary validation of DNSSEC signed records...

Security update for bind

This update for bind fixes the following issues: CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. CVE-2026-11331: potential wildcard CNAME RPZ policy bypass bsc1271984. CVE-2026-11622: potential memory usage beyond configured limits bsc1271986. CVE-2026-11721: cache poisoning...

SUSE-SU-2026:3554-1 Security update for bind

This update for bind fixes the following issues: - CVE-2026-10723: incorrect acceptance of NSEC3 records bsc1271982. - CVE-2026-11331: potential wildcard CNAME RPZ policy bypass bsc1271984. - CVE-2026-11622: potential memory usage beyond configured limits bsc1271986. - CVE-2026-11721: cache...

CVE-2026-68322

In the Linux kernel, the following vulnerability has been resolved: rds: Fix inet6addrlst NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, inet6addrlst is never initialized because inet6init exits before addrconfinit is called to initialize it. An attempt t...