PT-2026-92336

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An out-of-bounds read occurs in multiple files due to type confusion, which is a situation where a program accesses a resource using a type that is different fro...

PT-2026-92739

Name of the Vulnerable Software and Affected Versions Oracle Siebel CRM versions 17.0 through 26.7 Description A flaw in the Server Infrastructure component of the Siebel CRM Deployment product allows a low privileged attacker with access to the execution infrastructure to compromise the system...

PT-2026-92365

In platform msg handler init of default msg handlers.c, there is a possible confused deputy due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92345

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A missing bounds check in multiple locations allows for a possible out-of-bounds write, which is a condition where data is written outside the intended memory...

PT-2026-92353

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An incorrect bounds check in the Vp9DecEndOfStream function within vp9hwd output.cc allows for a possible out-of-bounds read. This condition can lead to local...

PT-2026-92347

Name of the Vulnerable Software and Affected Versions Bootloader affected versions not specified Description A logic error in the code allows a permission bypass, which could lead to local escalation of privilege. This issue requires System execution privileges and does not require user interacti...

CVE-2026-58734: Concurrent Execution using Shared Resource with Improper Synchronization

In googlembarecvmsg of googlembapoll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-92180: Uncontrolled Search Path Element

pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of pdfforge PDF Architect. An attacker must first obtain the ability to...

PT-2026-92348

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description A heap buffer overflow exists in the gf ta test set config function within the gf ta test.c file due to a logic error. This flaw allows for local escalation of privilege without...

PT-2026-92302

Name of the Vulnerable Software and Affected Versions VPU affected versions not specified Description An integer overflow in VPU can lead to an out-of-bounds write, which is a condition where data is written outside the intended memory boundary. This issue allows for local escalation of privilege...

CVE-2026-55332: Improper Input Validation

In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92338

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A missing bounds check in multiple locations allows for a possible out-of-bounds write, which is a condition where data is written outside the intended memory...

PT-2026-92321

In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92292

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A missing bounds check in the Wave6VpuDecFlush function within wave6.c allows for an out-of-bounds write. This condition can be exploited to achieve local...

PT-2026-92293

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the code allows for a permission bypass in multiple locations. This issue can lead to local escalation of privilege, granting System execution...

PT-2026-92286

In gsa sw pk hash compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-93099

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.2.16 Description A flaw in the Core component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the system. This can lead to a complete Denial of Service...

PT-2026-92318

Name of the Vulnerable Software and Affected Versions Trusted Execution Environment affected versions not specified Description Improper input validation in the Trusted Execution Environment can lead to memory corruption. This issue allows for local escalation of privilege, requiring System...

CVE-2026-40058: Time-of-check Time-of-use (TOCTOU) Race Condition

CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office File Malicious Macro Removal Windows policy setting is enabled and customers remain protected through the Cloud Anti-malware for Microsoft...

RockyLinux 9 : rsync (RLSA-2026:67462)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67462 advisory. rsync: rsync 2.3.3 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink CVE-2026-70460 rsync: rsync: TLS Certificate Validation Bypass allows...