HPESBHF05107 rev.2 - HPE ProLiant DL/ML/XD/XL, Alletra, Apollo, Edgeline, and Synergy Server Using Certain Intel Processors, INTEL-SA-01437, Intel UEFI Firmware Advisory, Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage Server 4210 - Prior to BIOS v1.8005-292026 HPE ProLiant Compute DL110 Gen12 - Prior to BIOS v1.8005-292026 HPE ProLiant Compute DL320 Gen12 - Prior to BI...

HPESBHF05069 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01419, 2026.2 IPU, Intel Trust Domain Extensions (Intel TDX) module Advisory

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to 2.09 HFP 2026.05.00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-31356 |...

Intel® Xeon® 6 processor with Intel® TDX Advisory

Summary: A potential security vulnerability in some Intel® Xeon® 6 processor with Intel® Trust Domain Extensions Intel® TDX may allow information disclosure. Intel is releasing a microcode update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-31938 Description:...

2026.3 IPU, Intel® UEFI Firmware Advisory

Summary: A potential security vulnerability for some Intel® UEFI Reference BIOS may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20712 Description: Incomplete cleanup in some UEFI firmware for so...

KLA91214 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, read local files, spoof user interface. Below is a complete...

PT-2026-70501

Name of the Vulnerable Software and Affected Versions Windows Imaging Component affected versions not specified Description An authorized attacker can locally disclose sensitive information due to the use of an uninitialized resource in the Windows Imaging Component. This issue allows the attacke...

Security Update for Microsoft .NET Core (August 2026)

The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - .NET Elevation of Privilege Vulnerability CVE-2026-58641, CVE-2026-62871, CVE-2026-62886, CVE-2026-62909 - .NET...

Security Update for Microsoft PowerPoint Products (August 2026)

The Microsoft PowerPoint Products are missing a security update. They are, therefore, affected by an information disclosure vulnerability. Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. Note that Nessus has not tested for this...

RHEL 9 : opentelemetry-collector (RHSA-2026:53412)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:53412 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: github.com/prometheus/prometheus: Prometheus:...

RHEL 9 : opentelemetry-collector (RHSA-2026:53415)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:53415 advisory. Collector with the supported components for a Red Hat build of OpenTelemetry Security Fixes: github.com/prometheus/prometheus: Prometheus:...

PT-2026-70335

Integer overflow in the UEFI firmware for the IntelR Slim Bootloader may allow an information disclosure. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local access when attack...

PT-2026-70801

Incomplete cleanup in some UEFI firmware for some IntelR reference platforms within UEFI may allow an information disclosure. System software adversary with a privileged user combined with a low complexity attack may enable data exposure. This result may potentially occur via local access when...

PT-2026-70708

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to locally disclose sensitive information, which can affect the system. Recommendations At the moment, there is no information...

PT-2026-70715

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read exists in Microsoft Office Excel, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds...

PT-2026-70423

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A buffer over-read in Windows NTFS allows an unauthorized attacker to disclose sensitive information through a physical attack. A buffer over-read occurs when a program reads more data...

PT-2026-70619

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An out-of-bounds read exists in Microsoft Office Word, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds re...

PT-2026-70416

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description The use of an uninitialized resource in the Windows Event Logging Service allows an authorized attacker to disclose information locally. Recommendations At the moment,...

PT-2026-70752

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...

PT-2026-70029

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description The WebSocket component of SAP Approuter fails to perform sufficient authorization checks within certain functionality. This allows an attacker with low privileges to access restricted...

PT-2026-70687

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description A buffer over-read in the Windows SMB Client allows an unauthorized attacker to disclose sensitive information over a network, which can subsequently affect the system. A buffer...