PT-2026-87278

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-87302

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...

PT-2026-87532

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network...

PT-2026-87477

A newly disclosed Windows BitLocker vulnerability CVE-2026-69449 could let attackers execute arbitrary code via local or network paths. Affected versions span Windows 10, Windows 11, and all recent Windows Server releases. Microsoft rates the risk “Important” yet “Exploitation Less Likely,” and h...

PT-2026-87331

Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally...

PT-2026-87318

Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

PT-2026-87389

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally...

PT-2026-87377

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

PT-2026-87282

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

PT-2026-87276

Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network...

PT-2026-87340

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

PT-2026-87330

Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...

PT-2026-87299

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...

PT-2026-87281

CVE-2026-68844 carries CVSS 7.8. Heap-based buffer overflow in Windows Storage Spaces Controller lets authorized low-privilege attackers run code locally. Exploitation less likely, no known in-the-wild attacks. https://t.co/NM3ozLiuBS https://t.co/tcyocQVd5S...

PT-2026-88491

Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-87980

🚨 CVE-2026-77906 Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. 🎖@cveNotify...

glib2 security update

2.80.4-22 - Fix CVE-2026-16118: heap-buffer-overflow in xdgmime byte-swap 2.80.4-21 - Fix CVE-2026-15588: limit D-Bus auth line read length 2.80.4-20 - Fix CVE-2026-58011: range validation in gdatetimeaddfull 2.80.4-19 - Fix CVE-2026-58012: buffer overflow in gregex.c with GREGEXRAW 2.80.4-18 - F...

VulnCheck KEV: CVE-2026-85880

Microsoft Windows Advanced Local Procedure Call contains a heap-based buffer overflow vulnerability that allows an attacker to elevate privileges locally...

ALSA-2026:64812 Moderate: expat security update

Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow CVE-2026-56132 For more details about the security...

ALSA-2026:64785 Critical: 389-ds-base security, bug fix, and enhancement update

389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP server and command-line utilities for server administration. Security Fixes: 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length...