PT-2026-58345

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow exists in the Windows Resilient File System ReFS, which allows an unauthorized attacker to execute code locally. This issue occurs duri...

PT-2026-58643

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Resilient File System ReFS, which is a file system designed for high availability and scalability. This flaw allo...

CVE-2026-56648: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network...

PT-2026-58165

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow exists in the Windows Resilient File System ReFS. A heap-based buffer overflow occurs when a program writes more data to a heap memory...

PT-2026-58494

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A use after free issue in Windows NTFS allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues t...

PT-2026-58445

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At...

PT-2026-58138

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A use-after-free condition exists in the Microsoft Brokering File System. A use-after-free is a memory corruption issue that occurs when an application continues to us...

PT-2026-58310

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

PT-2026-58472

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description An elevation-of-privilege issue exists in the Windows Universal Disk Format File System Driver UDFS, which allows attackers to gain higher...

PT-2026-58386

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Resilient File System ReFS, which allows an authorized attacker to elevate privileges locally. A heap-based buffe...

PT-2026-58490

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A race condition occurs in Windows NTFS due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally. A race condition i...

PT-2026-58220

Integer overflow or wraparound in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

PT-2026-58190

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows NTFS file system. This issue allows an unauthorized attacker to execute code locally by inducing the system to process a...

Oracle Linux 8 : kernel (ELSA-2026-36349)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36349 advisory. - fs/smb/client: fix out-of-bounds read in cifssanitizeprepath CKI Backport Bot RHEL-189506 CVE-2026-43112 - Enable workaround for ARM64 ERRATUM 41184...

PT-2026-58344

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

Path traversal in CLI command allows deletion of root file system

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability CWE-22 in FortiOS, FortiPAM, FortiProxy and FortiSwitch Manager may allow a privileged authenticated attacker with physical access to the device to delete the file system via crafted CLI commands...

CVE-2026-61503 Rejetto HFS < 3.2.1 Username Enumeration via Login Response Differences

Rejetto HFS 3.0.0 through 3.2.0 returns observably different responses from its login endpoint depending on whether the submitted username exists. A remote unauthenticated attacker can use this to confirm valid account names, including the default admin account, facilitating password-guessing and...

EUVD-2026-43509

Rejetto HFS 3.0.0 through 3.2.0 returns observably different responses from its login endpoint depending on whether the submitted username exists. A remote unauthenticated attacker can use this to confirm valid account names, including the default admin account, facilitating password-guessing and...

MLFlow Creates a Temporary File With Insecure Permissions

In mlflow/mlflow versions prior to 3.11.0, the getorcreatenfstmpdir function in mlflow/utils/fileutils.py creates temporary directories with world-writable permissions 0o777, and the createmodeldownloadingtmpdir function in mlflow/pyfunc/init.py creates directories with group-writable permissions...

PYSEC-2026-2655 MLFlow Creates a Temporary File With Insecure Permissions

In mlflow/mlflow versions prior to 3.11.0, the getorcreatenfstmpdir function in mlflow/utils/fileutils.py creates temporary directories with world-writable permissions 0o777, and the createmodeldownloadingtmpdir function in mlflow/pyfunc/init.py creates directories with group-writable permissions...