CVE-2026-79602: Improper Restriction of Operations within the Bounds of a Memory Buffer

A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen...

Linux Distros Unpatched Vulnerability : CVE-2026-79602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG in Xen. CVE-2026-79602 Note that Nessus relies on the presence...

PT-2026-87419

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack...

PT-2026-87951

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An out-of-bounds read in the Storage Port Driver allows an authorized attacker to disclose information locally. This issue also enables an elevation-of-privilege...

PT-2026-87739

Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally...

PT-2026-87863

Name of the Vulnerable Software and Affected Versions Storage Port Driver affected versions not specified Description A heap-based buffer overflow in the Storage Port Driver allows an authorized attacker to elevate privileges locally, potentially leading to full system compromise. A heap-based...

PT-2026-87854

Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally...

CVE-2026-69381: Out-of-bounds Read

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-69817: Use After Free

Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-72937: Out-of-bounds Read

Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally...

CVE-2026-77492: Out-of-bounds Read

Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally...

CVE-2026-72946: Heap-based Buffer Overflow

Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-68849: Out-of-bounds Read

Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally...

PT-2026-87103

A Server-Side Request Forgery SSRF vulnerability exists in the ONLYOFFICE ownCloud Integration plugin version 9.12. The /apps/onlyoffice/ajax/settings/address endpoint does not sufficiently validate the user-supplied Document Server URL before initiating outbound connections. An authenticated...

PT-2026-87286

Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-3345)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : dlm: validate length in dlmsearchrsbtreeCVE-2026-43125 net: annotate data-races around sk-skdataready,writespaceCVE-2026-23302 netfilter: ctnetlin...

The vulnerability of the Silabs CP210x VCP virtual COM port driver lies in its uncontrolled search path, which allows attackers to escalate their privileges and execute arbitrary code.

The vulnerability of the Silabs CP210x VCP virtual COM port driver is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053444)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053444 advisory. In the Linux kernel, the following vulnerability has been resolved: RDMA: Verify port when creating flow rule Validate port value provided by the user and with that...

CVE-2026-86121 Cua computer-server before 0.3.42 Unauthenticated RCE via Desktop Control

Cua computer-server versions before 0.3.42 skip authentication when the CONTAINERNAME environment variable is unset and bind to all interfaces by default, allowing unauthenticated attackers to execute arbitrary commands. Attackers can reach TCP port 8000 to run shell commands via the runcommand...

CVE-2026-86121 Cua computer-server before 0.3.42 Unauthenticated RCE via Desktop Control

Cua computer-server versions before 0.3.42 skip authentication when the CONTAINERNAME environment variable is unset and bind to all interfaces by default, allowing unauthenticated attackers to execute arbitrary commands. Attackers can reach TCP port 8000 to run shell commands via the runcommand...