CVE-2026-34335

Use-after-free in the Windows Ancillary Function Driver for WinSock is the root cause of CVE-2026-34335. The vulnerability can allow an authenticated, local attacker to elevate privileges. The CVSSv3.1 score is 7.0 (High) with local attack vector, high complexity, and requires low privileges and ...

CVE-2026-46328

A flaw was found in the Linux kernel's AppArmor security module. The system's rlimit resource limit for POSIX Portable Operating System Interface CPU timers was not correctly enforced. This issue, stemming from an overlooked step in applying resource limits, could allow a local attacker to bypass...

Windows Network Controller (NC) Host Agent Denial of Service Vulnerability

Use after free in Windows Network Controller NC Host Agent allows an authorized attacker to deny service locally...

Windows Projected File System Elevation of Privilege Vulnerability

Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally...

Windows Projected File System Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally...

Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Function Discovery Service fdwsd.dll allows an authorized attacker to elevate privileges locally...

Windows DWM Core Library Elevation of Privilege Vulnerability

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-46748

A vulnerability has been identified in SINEC INS All versions V1.0 SP2 Update 6. The affected system includes a binary that is configured with the capdacoverride capability. This capability allows the process to bypass file system permission checks, resulting in unrestricted file system access...

PT-2026-47961

Name of the Vulnerable Software and Affected Versions Linux MANA Driver affected versions not specified Windows Server Azure Network Adapter affected versions not specified Description A use after free issue exists in the Linux MANA Driver and the Windows Server Azure Network Adapter. This memory...

PT-2026-47906

Name of the Vulnerable Software and Affected Versions Windows 10 Version 1607 Description An integer underflow wrap or wraparound in the Windows NT OS Kernel occurs due to incorrect handling of integer values when forming data within the WMI Windows Management Instrumentation subsystem. This flaw...

PT-2026-47872

Name of the Vulnerable Software and Affected Versions Microsoft Kinect affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that contains a fix...

PT-2026-47911

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A use-after-free issue in the Microsoft Graphics Component allows an authorized attacker with low privileges to perform a local elevation of privilege. Use-after-free is ...

PT-2026-47971

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description Improper link resolution before file access, also known as link following, allows an unauthorized attacker to perform local tampering. Recommendations At the moment, there is no information abou...

PT-2026-47913

Name of the Vulnerable Software and Affected Versions Winlogon affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is ...

PT-2026-47896

Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally...

PT-2026-47981

Name of the Vulnerable Software and Affected Versions Windows Internet wininet.dll versions prior to June 2026 patchday Description An integer overflow or wraparound in the Windows Internet library wininet.dll allows an authorized attacker to elevate privileges locally. This issue occurs within t...

PT-2026-47895

Name of the Vulnerable Software and Affected Versions Windows NT OS Kernel affected versions not specified Description An integer underflow wrap or wraparound in the kernel allows an authorized attacker to elevate privileges locally. This issue can be used as a post-breach maneuver to gain full...

EulerOS 2.0 SP11 : python-virtualenv (EulerOS-SA-2026-2264)

According to the versions of the python-virtualenv packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use...

grepai Uses a Broken or Risky Cryptographic Algorithm

A vulnerability was determined in yoanbernabeu grepai up to 0.35.0. The affected element is the function PostgresStore.LookupByContentHash of the file indexer/chunker.go of the component Postgres Embedding Cache. Executing a manipulation of the argument contenthash can lead to use of weak hash. T...