CVE-2026-69544: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally...

PT-2026-87620

Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally...

CVE-2026-69618: Out-of-bounds Read

Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally...

PT-2026-87712

Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges over an adjacent network...

CVE-2026-66305: Use of Client-Side Authentication

Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...

PT-2026-88036

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A heap-based buffer overflow occurs in the Remote Desktop Client. This issue allows an unauthorized attacker to execute arbitrary code over a network. A heap-based buffer overfl...

PT-2026-87555

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description A heap-based buffer overflow occurs in the Windows SMB Client, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruptio...

PT-2026-87001

Name of the Vulnerable Software and Affected Versions Desigo CC ClickOnce Client versions V6 and V7 Desigo CC family versions V8 and V9 Desigo CC Flex Client versions V6 and V7 Desigo CC Installed Client versions V6 and V7 Description Insufficient input validation when handling scripts embedded...

PT-2026-89356

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description An issue exists where the software incorrectly handles the reuse of connections when client certificate settings are modified. This behavior can lead to the application of incorrect client...

ALSA-2026:64770 Important: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: crypto: pcrypt - Fix handling of MAYBACKLOG requests CVE-2026-43493 kernel: netfilter: conntrack: remove sprintf usage...

ALSA-2026:64808 Important: kernel security update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: iouring/poll: fix signed comparison in iopollgetownership CVE-2026-52933 kernel: netfilter: nat: use kfreercu to...

PT-2026-88438

Name of the Vulnerable Software and Affected Versions Okta Hyperdrive Integration affected versions not specified Description The installer fails to mask the OAuth client secret when it is passed as an MSI property. This results in the credential being recorded in plaintext within the installer...

PT-2026-88447

In Eclipse Ditto's Node.js JavaScript client, all released versions of @eclipse-ditto/ditto-javascript-client-node from 2.0.0 to 3.9.0 and of its predecessor package @eclipse-ditto/ditto-javascript-client-node 1.0 from 1.0.0 to 2.1.0, the WebSocket transport hard-codes rejectUnauthorized: false...

CVE-2026-80074: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-83998: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

PT-2026-87362

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description An out-of-bounds read exists that allows an authorized attacker to disclose sensitive information over a network, potentially affecting the system. Recommendations At the moment...

CVE-2026-69317: Out-of-bounds Read

Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network...

CVE-2026-57098: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Windows RDP Client allows an unauthorized attacker to disclose information over a network...

PT-2026-88284

Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...

NewStart CGSL MAIN 7.02 : nginx Multiple Vulnerabilities (NS-SA-2026-0104)

The remote NewStart CGSL host, running version MAIN 7.02, has nginx packages installed that are affected by multiple vulnerabilities: - When multiple server blocks are configured to share the same IP address and port, an attacker can use session resumption to bypass client certificate...