CVE-2026-56648: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network...

PT-2026-58165

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow exists in the Windows Resilient File System ReFS. A heap-based buffer overflow occurs when a program writes more data to a heap memory...

PT-2026-58494

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A use after free issue in Windows NTFS allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues t...

PT-2026-58445

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At...

PT-2026-58138

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A use-after-free condition exists in the Microsoft Brokering File System. A use-after-free is a memory corruption issue that occurs when an application continues to us...

PT-2026-58310

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

PT-2026-58472

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description An elevation-of-privilege issue exists in the Windows Universal Disk Format File System Driver UDFS, which allows attackers to gain higher...

PT-2026-58386

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Resilient File System ReFS, which allows an authorized attacker to elevate privileges locally. A heap-based buffe...

PT-2026-58490

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A race condition occurs in Windows NTFS due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally. A race condition i...

Path traversal in CLI command allows deletion of root file system

...

Oracle Linux 8 : kernel (ELSA-2026-36349)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-36349 advisory. - fs/smb/client: fix out-of-bounds read in cifssanitizeprepath CKI Backport Bot RHEL-189506 CVE-2026-43112 - Enable workaround for ARM64 ERRATUM 41184...

PT-2026-58220

Integer overflow or wraparound in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

PT-2026-58190

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows NTFS file system. This issue allows an unauthorized attacker to execute code locally by inducing the system to process a...

PT-2026-58366

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

PT-2026-58466

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Resilient File System ReFS, which is a high-performance file system designed for large data sets. This flaw allow...

PT-2026-58169

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute arbitrary code locally and remotely, potentially affecting the entire system. A heap-based buffer...

CVE-2026-61503 Rejetto HFS < 3.2.1 Username Enumeration via Login Response Differences

Rejetto HFS 3.0.0 through 3.2.0 returns observably different responses from its login endpoint depending on whether the submitted username exists. A remote unauthenticated attacker can use this to confirm valid account names, including the default admin account, facilitating password-guessing and...

EUVD-2026-43509

Rejetto HFS 3.0.0 through 3.2.0 returns observably different responses from its login endpoint depending on whether the submitted username exists. A remote unauthenticated attacker can use this to confirm valid account names, including the default admin account, facilitating password-guessing and...

MLFlow Creates a Temporary File With Insecure Permissions

In mlflow/mlflow versions prior to 3.11.0, the getorcreatenfstmpdir function in mlflow/utils/fileutils.py creates temporary directories with world-writable permissions 0o777, and the createmodeldownloadingtmpdir function in mlflow/pyfunc/init.py creates directories with group-writable permissions...

PYSEC-2026-2655 MLFlow Creates a Temporary File With Insecure Permissions

In mlflow/mlflow versions prior to 3.11.0, the getorcreatenfstmpdir function in mlflow/utils/fileutils.py creates temporary directories with world-writable permissions 0o777, and the createmodeldownloadingtmpdir function in mlflow/pyfunc/init.py creates directories with group-writable permissions...