Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally...

K000163690: Apache Tomcat vulnerabilities CVE-2026-78437, CVE-2026-86248, and CVE-2026-87022

Security Advisory Description CVE-2026-78437 Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially depends on timing cause one request from another user to fail. This issue affects Apache Tomcat: from 11.0.19 through 11.0.25, from 10.1.53 through 10.1.59, fro...

CVE-2026-109950

FreeRDP versions 3.0.0 through 3.31.x are vulnerable to a heap out-of-bounds read vulnerability when processing RD Gateway messages. The root cause is a mismatch in message lengths where an attacker controlling the gateway can set MsgBytes significantly larger than the NDR string ActualCount with...

EUVD-2026-98393

A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API All versions V3.3.62. Affected applications do not properly redact PLC restore passwords from HTTP error exception messages. This could allow an attacker with access to logs or other diagnostic output to obtai...

EUVD-2026-98043

Frappe ERPNext before 15.119.1 and 16.x before 16.32.0 contains a server-side template injection vulnerability because user-controlled message fields are not validated before template rendering, allowing expressions to run in an unrestricted context. Authenticated attackers holding a common...

CVE-2026-85860: Use After Free

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-100202: Use After Free

Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network...

CVE-2026-85334: Out-of-bounds Read

Out-of-bounds read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network...

CVE-2026-108460: Use After Free

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...

KB5127648: Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 Version 26H2 Security Update (October 2026)

The remote Windows host is missing security update 5127648. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...

CVE-2026-96921: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally...

CVE-2026-85874: Use After Free

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally...

Siemens SENTRON 3NA COM Fuse

SUMMARY SENTRON 3NA COM Fuse contains a Denial-of-Service vulnerability. Improper handling of a network management message could allow an attacker to trigger a denial-of-service DoS condition. Successful exploitation may require the affected network to be re-established to restore normal...

PT-2026-111630

Name of the Vulnerable Software and Affected Versions SFTPGo versions prior to 2.7.5 Description An authenticated SSH user can send a malformed protocol message during the channel opening process. This action triggers an unhandled error that terminates the server process, resulting in a denial of...

PT-2026-112724

Name of the Vulnerable Software and Affected Versions Windows Message Queuing Queue Manager affected versions not specified Description An out-of-bounds read in the Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network. An out-of-bounds read...

Microsoft Windows: CVE-2026-100202: Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-96921: Windows Message Queuing Queue Manager Information Disclosure Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85874: Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally...

PT-2026-112834

Name of the Vulnerable Software and Affected Versions Windows Message Queuing Queue Manager affected versions not specified Description A use after free issue in the Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally. This flaw can also be leveraged by...

Microsoft Windows: CVE-2026-85860: Windows Message Queuing Queue Manager Elevation of Privilege Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally...