PT-2026-70641

Name of the Vulnerable Software and Affected Versions Microsoft Office Access affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70509

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use-after-free condition in the Windows Kernel allows an authorized attacker to elevate privileges locally, enabling them to affect the system. Use-after-free is a memory corruption...

PT-2026-70511

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description An integer overflow or wraparound occurs in the Windows Projected File System, which allows an authorized attacker to elevate privileges locally. Recommendations At the...

PT-2026-70474

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A use-after-free condition in Windows Win32K allows an authorized attacker to elevate privileges locally. A use-after-free is a memory corruption issue that occurs when an application...

PT-2026-70580

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A heap-based buffer overflow occurs in Windows Win32K, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that...

PT-2026-70734

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an unauthorized...

PT-2026-70673

Name of the Vulnerable Software and Affected Versions Windows Autopilot affected versions not specified Description A use-after-free condition in Windows Autopilot enables an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...

PT-2026-70676

Name of the Vulnerable Software and Affected Versions Windows Autopilot affected versions not specified Description A use-after-free condition in Windows Autopilot enables an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...

PT-2026-70456

Name of the Vulnerable Software and Affected Versions Winlogon affected versions not specified Description A use-after-free condition in Winlogon allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application continues to u...

PT-2026-70738

Name of the Vulnerable Software and Affected Versions Windows Package Manager affected versions not specified Description Improper privilege management allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that...

Linux Distros Unpatched Vulnerability : CVE-2026-72694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a...

CVE-2026-21071

Improper input validation in the MPEG4 codec within libsavsvc.so allows local attackers to write out-of-bounds memory on Samsung devices prior to the SMR Aug-2026 Release 1 update. NVD rates it HIGH (CVSS 7.8) requiring low privileges; Samsung rates it MEDIUM (CVSS 5.1). No exploitation details a...

CVE-2026-19381

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLibKSFX.sys of the component Driver. Performing a manipulation results in improper privilege management. The attack needs to be approached locall...

CVE-2026-19382

A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attack can only be executed locally. The exploit has been made available to the...

CVE-2026-19382 Almico Speedfan MSR Index speedfan.sys KiSystemCall64 memory leak

A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attack can only be executed locally. The exploit has been made available to the...

CVE-2026-19382

CVE-2026-19382 affects Almico Speedfan 4.52, specifically the KiSystemCall64 function in the speedfan.sys MSR Index Handler. The weakness can cause a memory leak when a manipulation is executed locally. The exploit is publicly available, and the vendor has not responded to disclosure. The connect...

CVE-2026-19381

Kingston FURY CTRL RGB Control Software 2.0.65.0 is affected by a privilege management flaw in NTIOLib_KSFX.sys (Driver component). The vulnerability allows a local attacker to misuse an unknown function in the driver, with impact to confidentiality, integrity, and availability described as high....

EUVD-2026-54976

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLibKSFX.sys of the component Driver. Performing a manipulation results in improper privilege management. The attack needs to be approached locall...

Photon OS 5.0: Imagemagick PHSA-2025-5.0-91-0714

An update of the ImageMagick package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0714. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

MiracleLinux 9 : cifs-utils-7.6-2.el9_8 (AXSA:2026-1506:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1506:05 advisory. cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall CVE-2026-12505 Tenable has extracted the preceding description...