PT-2026-70615

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to locally disclose sensitive information, which can affect the system. Recommendations At the moment, there is no information...

KLA91211 ACE vulnerability in Microsoft SQL Server

Arbitrary code execution vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2026-65811 Exploitation Related products Microsoft-Power-BI CVE list CVE-2026-65811 critical KB list Solution Install necessa...

KLA91205 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An...

KLA91207 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user...

KB5121003: Windows 11 Version 24H2 / Windows 11 Version 25H2 Security Update (August 2026)

The remote Windows host is missing security update 5121003 or hotpatch 5120994. It is, therefore, affected by multiple vulnerabilities - Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. CVE-2026-62815 - Improper neutralization of special elements us...

Security Update for Microsoft .NET Core SDK (August 2026)

The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by a vulnerability as referenced in the vendor advisory. - .NET Elevation of Privilege Vulnerability CVE-2026-58641, CVE-2026-62871, CVE-2026-62886, CVE-2026-62909 - .NET Securit...

PT-2026-70705

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An off-by-one error occurs when a program writes or reads one element past the end of an array, which can lead to memory corruption or information disclosure. In this case, the...

KLA91203 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...

Security Updates for Microsoft Excel Products (August 2026)

The Microsoft Excel Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code over a network. CVE-2026-65807 -...

Security Updates for Microsoft Office Products (August 2026)

The Microsoft Office Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-63513, CVE-2026-63533, CVE-2026-65661 - Integer overflow or...

Security Updates for Microsoft Exchange Server (August 2026)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a...

Windows Package Manager (WinGet) < 1.29.280 Elevation of Privilege (CVE-2026-68821)

The version of Windows Package Manager WinGet installed on the remote host is prior to 1.29.280. It is, therefore, affected by an elevation of privilege vulnerability: - An elevation of privilege vulnerability exists in Windows Package Manager that allows a local attacker with low privileges to...

KB5120233: Windows Server 2025 Security Update (August 2026)

The remote Windows host is missing security update 5120233 or hotpatch 5120228. It is, therefore, affected by multiple vulnerabilities - Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. CVE-2026-62815 - Stack-based buffer overflow in Windows DNS...

CVE-2026-68870

The CVE-2026-68870 entry details a vulnerability in the Azure Key Vault secrets backend of Apache Airflow’s Microsoft Azure provider. In multi-team deployments, if a team-scoped lookup misses, a team-agnostic lookup can resolve a secret id that encodes another team’s namespace, allowing a caller ...

CVE-2026-72898

creationtimestamp| type| source ---|---|--- 2026-08-10 18:04:27+00:00| seen| https://infosec.exchange/users/wdormann/statuses/117072531713464991 2026-08-10 18:04:38+00:00| seen| https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3msqorw2bpc22 2026-08-10 18:56:56+00:00| seen|...

Exploit for Protection Mechanism Failure in Microsoft

cve-id Donate Support the maintenance of this project wit...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.0, there was a buffer overflow vulnerability in the MS-ADPCM and IMA-ADPCM decoders, due to unchecked predictor and stepindex values from input data. This vulnerability has been fixed in version 3.24.0...

nvmet-tcp: Fix potential UAF when ddgst mismatch

...

fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation}

...

An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across identity policies (incomplete fix of CVE-2026-48934). This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.

...