PT-2026-87820

🚨 CVE-2026-70586 MS Paint CVSS 8.8. heap buffer overflow. Microsoft: Remote Code Execution also Microsoft: victim opens your file so the kill chain is email a doodle, they open it in Paint to "fix one letter", code runs. we hardened the kernel for a decade. Paint still eats files like it is 1995...

PT-2026-88120

🚨 CVE-2026-83972 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-88119

🚨 CVE-2026-83971 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-88126

🚨 CVE-2026-83978 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-88121

🚨 CVE-2026-83973 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-88145

🚨 CVE-2026-84000 Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally. 🎖@cveNotify...

389-ds-base security, bug fix, and enhancement update

3.2.0-10 - Bump version to 3.2.0-10 - Resolves: RHEL-220500 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket rhel-10.2.z - Resolves: RHEL-222320 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference vi...

389-ds-base security, bug fix, and enhancement update

2.8.0-10 - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket rhel-9.8.z - Resolves: RHEL-222321 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and...

RHEL 7 : 389-ds-base (RHSA-2026:64771)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64771 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

PT-2026-88235

In a2dp vendor opus decoder decode packet of a2dp vendor opus decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

RHEL 8 : 389-ds:1.4 (RHSA-2026:64789)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64789 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

PT-2026-87557

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network...

RHEL 8 : expat (RHSA-2026:64809)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64809 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call...

EulerOS 2.0 SP12 : libssh2 (EulerOS-SA-2026-3354)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...

RHEL 10 : glib2 (RHSA-2026:64799)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:64799 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, t...

glib2 security update

2.68.4-19.10 - Fix CVE-2026-16118: heap-buffer-overflow in xdgmimemagic.c...

ALSA-2026:64799 Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: xdgmime: heap-based buffer...

Adobe Reader < 26.002.21901 Multiple Vulnerabilities (APSB26-141) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 26.002.21901. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that...

CVE-2026-18355

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...

AZL-99980 CVE-2026-18355 affecting package 389-ds-base 3.1.1-12

A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. In sasliostartpacket, the wrapped-record length read from the wire is validated only against an upper bound. A small wire length 0, 1, or 2 produces an encryptedbuffercount below the already-consumed...