PT-2026-2686

Name of the Vulnerable Software and Affected Versions Graphics Kernel affected versions not specified Description A flaw exists that allows a local attacker to elevate privileges. This is due to a race condition occurring during concurrent execution when accessing a shared resource with improper...

PT-2026-2742

CVE-2026-20940 Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. https://t.co/Adw7dGq8xp...

PT-2026-2705

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A type confusion issue exists in the Windows Ancillary Function Driver for WinSock. This allows a locally authorized attacker to gain elevated privileges...

Check Point Response to CVE-2025-9142 - Harmony SASE Windows Client Vulnerability

Cause The authentication and file-handling logic does not enforce strict trust boundaries. Under specific conditions, the system fails to validate data during certificate processing before using it in a privileged service component. Symptoms - A local attacker can trigger Harmony SASE Windows...

PT-2026-2353

Name of the Vulnerable Software and Affected Versions TeleControl Server Basic versions prior to 3.1.2.4 Description The application contains a local privilege escalation issue that could allow an attacker to execute arbitrary code with elevated privileges. Recommendations Update TeleControl Serv...

PT-2026-2716

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions affected versions not specified Description A use-after-free condition exists in the Desktop Windows Manager that could allow an authorized attacker to gain elevated privileges on a local system. Recommendations At t...

MiracleLinux 8 : sudo-1.9.5p2-1.el8_10.1 (AXSA:2025-10408:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2025-10408:01 advisory. sudo: LPE via host option CVE-2025-32462 Tenable has extracted the preceding description block directly from the MiracleLinux security advisory. Note that...

MiracleLinux 9 : libblockdev-2.28-14.el9_6 (AXSA:2025-10552:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10552:03 advisory. libblockdev: LPE from allowactive to root in libblockdev via udisks CVE-2025-6019 Tenable has extracted the preceding description block directly from the...

PT-2026-2729

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A use-after-free condition exists in Windows Management Services that could allow a local attacker to gain elevated privileges. The issue allows attackers to affect the...

Mediconta 代码问题漏洞

Mediconta is a medical clinic management software by Luis Martinez Personal Developer. A code issue vulnerability exists in Mediconta version 3.7.27, which stems from an unquoted service path that could lead to code execution by a local user with elevated privileges...

PT-2026-2681

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A time-of-check time-of-use TOCTOU race condition exists in the Windows Ancillary Function Driver for WinSock. This condition allows a locally authorized...

Cyclades Serial Console Server 安全漏洞

Cyclades Serial Console Server is a serial console server appliance from Cyclades USA. A security vulnerability exists in Cyclades Serial Console Server version 3.3.0, which stems from overly lax sudo privileges that could lead to local elevation of privilege...

Wondershare Dr.Fone 代码问题漏洞

Wondershare Dr. Fone is a one-stop solution for cell phones from China's Wanxing Wondershare. A code issue vulnerability exists in Wondershare Dr. Fone, which stems from an unquoted service path that can be exploited by an attacker to cause a local user to execute arbitrary code and elevate syste...

PT-2026-2378

Name of the Vulnerable Software and Affected Versions Wondershare FamiSafe version 1.0 Description The software contains an unquoted service path issue within the FSService component. This could allow local users to potentially execute code with elevated privileges. The issue stems from an unquot...

PT-2026-2693

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A flaw exists in the Windows Clipboard Server that could allow an attacker to gain higher-level access to a system. This issue involves a use-after-free condition. An attacker could exploit...

PT-2026-2708

CVE-2026-20863 Double free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. https://t.co/OJll1df465...

PT-2026-2715

CVE-2026-20870 Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally. https://t.co/fvnvcYOwh7...

PT-2026-2723

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A flaw exists in Windows Management Services that could allow an authorized attacker to elevate privileges locally due to a race condition during concurrent execution usin...

Cobian Backup 代码问题漏洞

Cobian Backup is a file backup software by Luis Cobian Personal Developer. A code issue vulnerability exists in Cobian Backup version 0.9, which stems from the presence of an unquoted service path to the CobianReflectorService, which could lead to the execution of arbitrary code by a local user...

PT-2026-2405

Name of the Vulnerable Software and Affected Versions Connectify Hotspot 2018 Description Connectify Hotspot 2018 contains a flaw due to an unquoted service path in the ConnectifyService executable. This allows local attackers to potentially execute arbitrary code. The issue stems from the unquot...