PT-2026-70247

Vim is an open source, command line text editor. From 9.2.0511 until 9.2.0844, json decode item in src/json.c can retain a stale pointer after json decode string invokes channel fill to refill and free the current buffer, causing the error path to read freed memory instead of reader-js buf +...

RHEL 10 : kernel (RHSA-2026:53330)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:53330 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: fsnotify: Fix ordering of ip...

PT-2026-70020

Name of the Vulnerable Software and Affected Versions SAP SAPSPrint Service affected versions not specified Description Memory corruption exists in the handling of certain commands. An unauthenticated attacker can send specially crafted requests to trigger a buffer overflow, which leads to a...

PT-2026-70787

Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools. Prior to 4.28.7, index.js retains every distinct queries, context result in cache and every parseQueries AST in parseCache without a size cap, TTL, or eviction, allowing an attacker who...

PT-2026-70988

OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability...

PT-2026-70098

Name of the Vulnerable Software and Affected Versions iperf3 affected versions not specified Description A remote unauthenticated attacker can exploit a flaw in the JSON read function. The function accepts a message length controlled by the peer and allocates memory without an upper bound, which...

PT-2026-70405

Name of the Vulnerable Software and Affected Versions Virtual Hard Disk VHD Miniport Driver affected versions not specified Description A use-after-free issue exists in the Virtual Hard Disk VHD Miniport Driver. This allows an authorized attacker to elevate privileges locally on the system...

PT-2026-70446

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description A use-after-free condition in the Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

PT-2026-70677

Name of the Vulnerable Software and Affected Versions Windows Autopilot affected versions not specified Description A use-after-free condition in Windows Autopilot allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...

PT-2026-70436

Name of the Vulnerable Software and Affected Versions Windows Network Connection Broker affected versions not specified Description A double free issue in the Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. A double free occurs when the system attemp...

PT-2026-70791

A Use‑After‑Free UAF vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability...

PT-2026-70461

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

PT-2026-70474

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A use-after-free condition in Windows Win32K allows an authorized attacker to elevate privileges locally. A use-after-free is a memory corruption issue that occurs when an application...

PT-2026-70456

Name of the Vulnerable Software and Affected Versions Winlogon affected versions not specified Description A use-after-free condition in Winlogon allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application continues to u...

PT-2026-70457

Name of the Vulnerable Software and Affected Versions Windows MIDI Service Module affected versions not specified Description A heap-based buffer overflow occurs in the Windows MIDI Service Module. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based...

PT-2026-70425

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Telephony Service, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a...

PT-2026-70426

Name of the Vulnerable Software and Affected Versions Windows Sensor Data Service affected versions not specified Description A heap-based buffer overflow in the Windows Sensor Data Service allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a...

PT-2026-70433

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A heap-based buffer overflow occurs in the Remote Desktop Client, which allows an unauthorized attacker to execute arbitrary code over a network and affect the system. A...

PT-2026-70438

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose sensitive information locally and affect the system. A heap-based buffer overflow occurs when...

PT-2026-70893

ffuf is a fast web fuzzer written in Go. Prior to 2.2.0, ffuf allows a malicious target server to cause an out-of-memory denial of service because the response size guard in pkg/runner/simple.go checks only the compressed Content-Length while io.ReadAll reads gzip, brotli, deflate, transparently...