Microsoft Windows: CVE-2026-88112: Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-88098: Windows Security Support Provider Interface Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88076: Windows Installer Elevation of Privilege Vulnerability

Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88079: Windows MIDI Service Module Elevation of Privileges Vulnerability

Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69902: Windows NTFS Remote Code Execution Vulnerability

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally...

Microsoft Windows: CVE-2026-96924: Windows OLE Remote Code Execution Vulnerability

Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-96931: Windows NTFS Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96933: Windows COM+ Event System Service Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96953: Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability

Null pointer dereference in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute code locally...

Microsoft Windows: CVE-2026-96847: WebDAV Elevation of Privilege Vulnerability

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally...

PT-2026-113137

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-113139

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

SUSE SLES15 Security Update : expat (SUSE-SU-2026:4623-1)

"The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4623-1 advisory. - CVE-2025-59375: denial of service resource consumption caused by processing malformed small documents bsc1249584. -...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : libde265 vulnerability (USN-8909-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8909-1 advisory. It was discovered that libde265 did not properly validate certain crafted H.265 bitstreams, leading to...

PT-2026-111883

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...

PT-2026-111900

Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-103852: NULL Pointer Dereference

Substance3D - Stager is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction...

Microsoft Windows: CVE-2026-88114: Windows Domain Name Service Remote Code Execution Vulnerability

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

CVE-2026-107888

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference in cupsdCheckJobs when a job marked job-held-on-create refers to a temporary printer that has been automatically deleted. Temporary-printer cleanup can remove the destination without canceling its held jobs, and the scheduler...

CVE-2026-107890

OpenPrinting CUPS before 2.4.20 contains a NULL pointer dereference caused by repeated IPP group tags in job-creation requests. IPP parsing creates unnamed separator attributes with IPPTAGZERO, but addjob converts these separators to IPPTAGJOB. During job startup, getoptions/ipplength subsequentl...