PT-2026-71323

Name of the Vulnerable Software and Affected Versions IBM Informix Dynamic Server version 14.10 IBM Informix Dynamic Server version 15.0 Description A local privilege escalation issue exists in the oninit setuid-root utility. This allows a local user to gain elevated privileges on the system...

PT-2026-71123

Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users...

PT-2026-71329

IBM Db2 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to cause a denial of service due to a memory leak...

open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket

A flaw was found in open-iscsi. An incorrect authorization vulnerability allows unprivileged local users to bypass authentication for the iscsiuio control socket. This enables unauthorized access to the control socket, potentially leading to system compromise or disruption of iSCSI Internet Small...

CVE-2026-33921

A flaw was found in the Npcap driver. The Windows installer for Arc deployed Npcap with insecure default access restrictions, allowing any local user, not just administrators, to access the driver. This vulnerability enables a local user without administrative privileges to capture network traffi...

CVE-2026-62917

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:19+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:24+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:15+00:00| seen|...

CVE-2026-48790

Turso CLI is the command line interface CLI to the open-source database Turso. Versions prior to 1.0.26 persist the user's Turso platform JWT to settings.json using Viper's default configPermissions of 0o644, leaving the credential file world-readable on standard Linux and macOS systems. Any othe...

CVE-2026-0465

A Use‑After‑Free UAF vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability...

CVE-2026-70338

Improper control of generation of code 'code injection' in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-68814

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

UBUNTU-CVE-2026-70354

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

CVE-2026-65783

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...

CVE-2026-62798

Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally...

CVE-2026-62793

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-62786

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally...

CVE-2026-62779

Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally...

CVE-2026-62772

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-62743

Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally...

CVE-2026-62733

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-62728

Time-of-check time-of-use toctou race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...