Photon OS 5.0: Vim PHSA-2026-5.0-92-0950

An update of the vim package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0950. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 9 : pipewire (ELSA-2026-47082)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-47082 advisory. 1.4.11-1 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164828 Tenable has extracted the preceding description block directly from the Oracle...

Photon OS 5.0: Rpm PHSA-2026-5.0-92-0953

An update of the rpm package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0953. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket

A flaw was found in open-iscsi. An incorrect authorization vulnerability allows unprivileged local users to bypass authentication for the iscsiuio control socket. This enables unauthorized access to the control socket, potentially leading to system compromise or disruption of iSCSI Internet Small...

CVE-2026-33921

A flaw was found in the Npcap driver. The Windows installer for Arc deployed Npcap with insecure default access restrictions, allowing any local user, not just administrators, to access the driver. This vulnerability enables a local user without administrative privileges to capture network traffi...

CVE-2026-62917

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:19+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:24+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:15+00:00| seen|...

CVE-2026-48790

Turso CLI is the command line interface CLI to the open-source database Turso. Versions prior to 1.0.26 persist the user's Turso platform JWT to settings.json using Viper's default configPermissions of 0o644, leaving the credential file world-readable on standard Linux and macOS systems. Any othe...

CVE-2026-0465

A Use‑After‑Free UAF vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability...

CVE-2026-70338

Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-68814

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

UBUNTU-CVE-2026-70354

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

CVE-2026-65783

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...

CVE-2026-62798

Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally...

CVE-2026-62793

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-62786

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally...

CVE-2026-62779

Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally...

CVE-2026-62772

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-62743

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally...

CVE-2026-62733

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-62728

Time-of-check time-of-use toctou race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...