PT-2026-113120

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-108130: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

PT-2026-112730

Name of the Vulnerable Software and Affected Versions Windows USB Video Driver affected versions not specified Description A heap-based buffer overflow exists in the Windows USB Video Driver. This flaw allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occur...

Microsoft Windows: CVE-2026-83934: Windows GDI+ Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70069: Windows DHCP Server Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83935: Microsoft XML Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network...

PT-2026-112179

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Resilient File System ReFS, which allows an authorized attacker to elevate privileges locally. A heap-based buffe...

CVE-2026-109951: Out-of-bounds Read

FreeRDP 3.17.1 before 3.32.0 contains a heap buffer over-read vulnerability in DynvcTrackerHandleCreateBack of the freerdp-proxy DRDYNVC channel handler that allows malicious backend RDP servers to read heap memory out of bounds. Attackers can send a CREATEREQUESTPDU whose channel name lacks a NU...

PT-2026-111303

Name of the Vulnerable Software and Affected Versions Wavlink WL-WN530BE1-A version 251117 Description A stack-based buffer overflow exists in the Settings Export CGI component. The issue occurs within the strcpy function located in the '/cgi-bin/ExportAllSettings.cgi' endpoint when the HTTP...

PT-2026-112168

Name of the Vulnerable Software and Affected Versions Windows Internet Information Services affected versions not specified Description A stack-based buffer overflow occurs in Windows Internet Information Services, which allows an unauthorized remote attacker to execute arbitrary code over a...

DirectWrite Code Execution

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Graphics Kernel Subsystem Code Execution

The vulnerability of the Graphics Kernel subsystem in Windows operating systems is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2026-111901

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

Microsoft Windows: CVE-2026-83931: Windows Hyper-V Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...

Security Updates for Microsoft Office Online Server (October 2026)

The Microsoft Office Online Server or Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

Ubuntu 26.04 LTS : openCryptoki vulnerabilities (USN-8707-1)

The remote Ubuntu 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8707-1 advisory. It was discovered that primitive decoders in openCryptoki produced integer underflows when the encoded length was zero. An attacker could possibly use th...

KB5126653: Windows 11 version 23H2 Security Update (October 2026)

The remote Windows host is missing security update 5126653. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : PostgreSQL vulnerabilities (USN-8653-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8653-1 advisory. It was discovered that PostgreSQL incorrectly handled COPY FROM STDIN when an early failure occurred. An authenticated user could...

KB5127648: Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 Version 26H2 Security Update (October 2026)

The remote Windows host is missing security update 5127648. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...

SUSE SLED15 / SLES15 Security Update : expat (SUSE-SU-2026:4619-1)

"The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4619-1 advisory. - CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents...