CVE-2026-65131: Missing Authentication for Critical Function

NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication. A successful exploit of this vulnerability might lead to denial of service...

PT-2026-111690

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...

PT-2026-111571

Name of the Vulnerable Software and Affected Versions Wazuh versions 3.12.0 through 4.14.7 Description A heap buffer overflow exists in the fim generate alert function. The issue occurs because the full log variable is sized based on input but written with a boundary defined by OS MAXSTR. An...

PT-2026-111515

NVIDIA NVSentinel for Linux contains a vulnerability in the platform-connectors component, where the gRPC health-event interface, exposed over a world-writable Unix domain socket, lacks authentication. A successful exploit of this vulnerability might lead to denial of service...

PT-2026-113428

Indico is a feature-rich event management system. Indico 3.3.3 through 3.3.13 incorrectly uses the ambient web-session user instead of the user supplied to Contribution.can manage when checking inherited event contribution-management permission. A low-privileged user can induce a privileged user ...

CVE-2026-53711: Improper Neutralization of Input During Web Page Generation

MCP Context Forge provides an MCP Admin UI for managing gateway resources. From 0.2.0 until 0.3.1, the Global Prompts feature stores a prompt template without sufficient output encoding before the MCP Admin UI renders it. An authenticated attacker can save markup containing script-capable event...

AegisAsync: Symbolic Async-Event Simulation for Risks in Python Asynchronous Programs

Security and robustness risks in Python async programs depend on event order, object identity, and execution after exceptions or cancellation. Detecting these risks requires connecting related operations across function calls and tracking their effects along execution paths. We present AegisAsync...

PT-2026-121127

Уязвимость службы трассировки Windows Event Tracing операционной системы Windows связана с недостатками процедуры авторизации. Эксплуатация уязвимости может позволить нарушителю проводить спуфинг-атаки...

CVE-2026-83707: Use After Free

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

CVE-2026-83723: Use of Uninitialized Resource

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...

CVE-2026-70134: Use After Free

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

CVE-2026-83836: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally...

CVE-2026-83848: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83785: Use After Free

Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83856: Out-of-bounds Read

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

CVE-2026-83874: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network...

CVE-2026-83830: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70235: Missing Authorization

Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally...

Microsoft Windows: CVE-2026-83723: Windows Event Logging Service Information Disclosure Vulnerability

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83707: Windows Event Tracing Elevation of Privilege Vulnerability

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...