CVE-2026-83776: Out-of-bounds Read

Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack...

Microsoft Windows: CVE-2026-83868: Microsoft Bluetooth Driver Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally...

PT-2026-112570

Name of the Vulnerable Software and Affected Versions Microsoft Bluetooth Driver affected versions not specified Description An out-of-bounds read occurs in the Microsoft Bluetooth Driver, which allows an unauthorized attacker to elevate privileges through a physical attack. An out-of-bounds read...

CVE-2026-85355: Inclusion of Functionality from Untrusted Control Sphere

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-83666: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

CVE-2026-95943: Double Free

Double free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

Mozilla Thunderbird < 153.5

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 153.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-110 advisory. - Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and...

Unbreakable Enterprise kernel security update

5.15.0-325.221.6.2 - eventpoll: fix epremove struct eventpoll / struct file UAF Christian Brauner Orabug: 39784995 CVE-2026-46242 - eventpoll: move epifget up Christian Brauner Orabug: 39784995 - eventpoll: rename epremovesafe back to epremove Christian Brauner Orabug: 39784995 - eventpoll: drop...

Mozilla Thunderbird < 158.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 158.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-109 advisory. - Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Axios vulnerabilities (USN-8638-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8638-1 advisory. Ameer Assadi discovered that Axios did not properly handle certain hostnames when applying NOPROXY rules. An attacker...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : util-linux vulnerabilities (USN-8702-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8702-1 advisory. It was discovered that libblkid in util-linux had a heap use-after-free vulnerability during nested partition probing. An attacke...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : .NET vulnerabilities (USN-8641-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8641-1 advisory. Miha Zupan discovered that .NET did not properly interpret certain HTTP requests. An attacker could possibly use this issue to...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : attr vulnerability (USN-8691-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8691-1 advisory. It was discovered that attr incorrectly handled symbolic links while traversing directory...

CVE-2026-102202: Improper Link Resolution Before File Access

Improper access control in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

Mozilla Thunderbird < 153.5

The version of Thunderbird installed on the remote Windows host is prior to 153.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-110 advisory. - Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and Firefox ESR...

Microsoft Windows: CVE-2026-70262: WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-85941: Windows Installer Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83644: Windows Audio Service Elevation of Privilege Vulnerability

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

PT-2026-112880

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85842: Windows Image Acquisition Elevation of Privilege Vulnerability

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...