RHEL 7 : firefox (RHSA-2026:76741)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:76741 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

Elasticsearch 9.0.x < 9.4.7 / 9.5.x < 9.5.4 Privilege Escalation (ESA-2026-197)

The version of Elasticsearch installed on the remote host is 9.0.x prior to 9.4.7, or 9.5.x prior to 9.5.4. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-197 advisory. - Incorrect Authorization CWE-863 in Elasticsearch can lead to Privilege Escalation via a delegated...

The vulnerability of the HU250 microprogramming software module of the modular remote terminal for telemechanics and automation by PowerLogic T300 (formerly Easergy T300 RTU) allows a intruder to gain enhanced privileges and control over the device entirely.

The vulnerability of the HU250 microprogramming software for modular remote terminals in telemechanics and automation systems from PowerLogic T300 formerly Easergy T300 RTU relates to the lack of measures taken to neutralize special elements. Exploiting this vulnerability can allow attackers to...

CVE-2026-48197: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in PublishPress PublishPress Capabilities capability-manager-enhanced allows Privilege Escalation.This issue affects PublishPress Capabilities: from n/a through 2.45.0...

The vulnerability of the ModernExecServer.dll library of the Modern Execution Server operating system allows a hacker to exploit their elevated privileges.

The vulnerability of the ModernExecServer.dll library of the Modern Execution Server operating system is related to the use of memory after release. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows operating system’s kernel allows attackers to enhance their privileges.

The vulnerability of the Windows operating system’s kernel is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems allows attackers to enhance their privileges.

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the USB Video Driver driver for Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the USB Video Driver driver for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the biometric service in Windows operating systems allows a perpetrator to elevate their privileges.

The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Secure Kernel Mode mechanism in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Windows Secure Kernel Mode mechanism in Windows operating systems is related to the swapping of a non-trusted pointer. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Device Association Service in Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of the Device Association Service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Rocky Linux 10.1 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (crlsa-2026_1690)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20261690 advisory. kernel: Linux kernel: irqchip/gic-v2m use-after-free vulnerability CVE-2025-37819 kernel: RDMA/core: Fix KASAN: slab-use-after-free Read in...

The vulnerability of the Hyper-V component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Hyper-V component of the Windows operating system is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Cloud Files Mini Filter Driver for operating systems Windows allows attackers to increase their privileges.

The vulnerability of the Cloud Files Mini Filter Driver for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the trusted execution environment allows for attacks on the Virtualization-Based Security (VBS) Enclave of Windows operating systems, enabling attackers to increase their privileges.

The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to the swapping of non-trusted pointers. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Remote Desktop Services (RDS) for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of Remote Desktop Services RDS for Windows operating systems lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability allows an attacker to increase their privileges remotely...

The vulnerability in the web interface of the Azure HDInsight data analytics service’s Apache Ambari allows a hacker to escalate their privileges.

The vulnerability in the Apache Ambari web interface of the Azure HDInsight data analytics service relates to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

RHEL 9 : grafana (RHSA-2026:76795)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:76795 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: crypto/x509:...

RHEL 9 : firefox (RHSA-2026:76742)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:76742 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...