PT-2026-71074

Name of the Vulnerable Software and Affected Versions CryptoPro Secure Disk for Bitlocker versions prior to 7.7.4 Description The software fails to enforce Integrity Measurement Architecture IMA policy protections across temporary file systems. IMA is a kernel-based mechanism that maintains a...

CVE-2025-59326

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for unsigned code to be executed from these locations...

EUVD-2025-210719

CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for unsigned code to be executed from these locations...

CVE-2025-59326

CPSD CryptoPro Secure Disk for Bitlocker versions prior to v7.7.4 fail to enforce Integrity Measurement Architecture (IMA) policy protections across temporary file systems. IMA is a kernel-based mechanism designed to maintain runtime measurements and ensure that only trusted code is executed. Due...

SUSE-SU-2026:23231-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-23259: iouring/rw: free potentially allocated iovec on cache put failure bsc1259866. - CVE-2026-31443: dmaengine: idxd: Fix crash when the event log is disabled...

CVE-2026-48441

CVE-2026-48441 affects Lightroom Classic. The issue is an Improper Limitation of a Pathname to a Restricted Directory (path traversal) that could allow arbitrary file system reads. The root cause is a pathname handling flaw that improperly constrains access to restricted directories. Victims must...

CVE-2026-62751 Windows Projected File System Elevation of Privilege Vulnerability

...

EUVD-2026-56652

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-62751

CVE-2026-62751 describes an integer overflow or wraparound in Windows Projected File System that enables a locally authenticated attacker to elevate privileges. The entry cites a CVSS v3.1 base score of 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, and privileges required as LOW; im...

CVE-2026-62751 Windows Projected File System Elevation of Privilege Vulnerability

...

CVE-2026-62728 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

EUVD-2026-56467

Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network...

CVE-2026-68819 Windows Network File System Denial of Service Vulnerability

...

CVE-2026-62722

Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally...

GHSA-9W6W-8X3C-HFQP Duplicate Advisory: Craft CMS: Incorrect path validation could potentially lead to path traversal

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7hxc-f267-h5q7. This link is maintained to preserve external references. Original Description Craft CMS versions = 5.0.0-RC1 before 5.10.6 and = 4.0.0-RC1 before 4.18.2 contain a theoretical path traversal...

Duplicate Advisory: Craft CMS: Incorrect path validation could potentially lead to path traversal

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-7hxc-f267-h5q7. This link is maintained to preserve external references. Original Description Craft CMS versions = 5.0.0-RC1 before 5.10.6 and = 4.0.0-RC1 before 4.18.2 contain a theoretical path traversal...

Windows Projected File System Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-72783

Craft CMS versions = 5.0.0-RC1 before 5.10.6 and = 4.0.0-RC1 before 4.18.2 contain a theoretical path traversal weakness in the ensurePathIsContained function of the Local file system class. The order of operations validates the path before normalization, so normalization could invalidate prior...

CVE-2026-68168

A flaw was found in the Linux kernel's Andrew File System AFS component. The system's directory removal function, afseditdirremove, incorrectly manages memory blocks, specifically block 0. This improper handling could lead to an unstable system state or data integrity issues during directory...

CVE-2026-72783 Craft CMS 5.0.0-RC1 before 5.10.6 Path Traversal via ensurePathIsContained

Craft CMS versions = 5.0.0-RC1 before 5.10.6 and = 4.0.0-RC1 before 4.18.2 contain a theoretical path traversal weakness in the ensurePathIsContained function of the Local file system class. The order of operations validates the path before normalization, so normalization could invalidate prior...