PT-2026-58385

Name of the Vulnerable Software and Affected Versions Windows Backup Engine affected versions not specified Description A use-after-free condition in the Windows Backup Engine allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when...

PT-2026-58325

Name of the Vulnerable Software and Affected Versions Windows Operating Systems affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges locally, potentially enabling a full system takeover. Recommendations At the moment, there is no...

PT-2026-58499

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A heap-based buffer overflow in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. This issue enables a low-privile...

PT-2026-58746

Name of the Vulnerable Software and Affected Versions NVIDIA TensorRT-LLM for Linux affected versions not specified Description A flaw exists in the restricted unpickler used for model weight deserialization. This allows a local, unauthenticated attacker to trigger the deserialization of untruste...

PT-2026-58157

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. This issue is particularly critical for server...

PT-2026-58167

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use after free flaw in the Windows Kernel allows an authorized attacker to bypass security boundaries and elevate privileges locally. Use after free is a memory corruption issue that...

PT-2026-58473

Name of the Vulnerable Software and Affected Versions Windows Print Spooler affected versions not specified Description A heap-based buffer overflow exists in Windows Print Spooler components. This flaw allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occu...

PT-2026-58188

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Windows Desktop Window Manager affected versions not specified Description An integer underflow wrap or wraparound in the Windows Kernel allows an authorized attacker to disclose information...

PT-2026-58546

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description Use of an uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose sensitive information locally and affect the system. Recommendations At the moment,...

PT-2026-58255

Name of the Vulnerable Software and Affected Versions Windows Remote Help Defense affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that...

PT-2026-58235

Name of the Vulnerable Software and Affected Versions Quality Windows Audio/Video Experience QWAVE service affected versions not specified Description A use-after-free condition in the Quality Windows Audio/Video Experience QWAVE service allows an authorized attacker to elevate privileges locally...

PT-2026-58183

Name of the Vulnerable Software and Affected Versions Microsoft Windows DNS affected versions not specified Description Improper privilege management in Microsoft Windows DNS allows an authorized attacker to locally bypass a security feature. Recommendations At the moment, there is no information...

PT-2026-58205

Name of the Vulnerable Software and Affected Versions Windows Clip Service affected versions not specified Description A race condition occurs in the Windows Clip Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally...

CVE-2026-15681 AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability

AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in order t...

CVE-2026-15681

Summary: CVE-2026-15681 affects AnyDesk. The flaw is in the handling of screen recording files: by creating a junction, a local attacker can cause the service to create arbitrary files, leading to a denial-of-service condition. Exploitation requires low-privilege code execution on the target syst...

CVE-2026-15682 AnyDesk Support Information Link Following Denial-of-Service Vulnerability

AnyDesk Support Information Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

PYSEC-2026-2496 Glances has Insecure Pickle Deserialization in its Version Cache that Leads to Arbitrary Code Execution

Summary glances/outdated.py uses pickle.load to read a version-check cache file stored at a predictable, world-accessible path /.cache/glances/glances-version.db or $XDGCACHEHOME/glances/glances-version.db. No integrity check, signature verification, or format validation is performed before...

PYSEC-2026-2548 Keylime has a hardcoded attestation challenge nonce that allows replay attacks

CVE-2026-6420: Hardcoded attestation challenge nonce allows replay attacks Impact The CertificationParameters.generatechallenge method in the push attestation protocol uses a hardcoded challenge nonce instead of generating a cryptographically random value. This removes the nonce-based replay...

PYSEC-2026-2521 InstructLab vulnerable to Path Traversal

A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handler by manipulating the logsdir parameter. This allows the attacker to create new directories and write files to arbitrary locations on the system, potentially leading to...

kernel: rtmutex: Use waiter::task instead of current in remove_waiter()

A flaw was found in the Linux kernel. When the kernel's real-time mutex rtmutex component performs a specific operation called 'proxy-lock rollback' during futex requeue, it incorrectly handles task pointers. This can lead to a 'Use-After-Free' UAF vulnerability, where the system attempts to use...