CVE-2026-70058: Out-of-bounds Write

Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-83722: Use After Free

Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

CVE-2026-83691: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

CVE-2026-83635: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network...

CVE-2026-83753: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...

CVE-2026-70087: Incorrect Authorization

Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally...

KB5126653: Windows 11 version 23H2 Security Update (October 2026)

The remote Windows host is missing security update 5126653. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...

Microsoft Windows: CVE-2026-96246: Network Policy Server (NPS) Information Disclosure Vulnerability

Out-of-bounds read in Network Policy Server NPS allows an unauthorized attacker to disclose information over a network...

KB5126835: Windows Server 2012 Security Update (October 2026)

The remote Windows host is missing security update 5126835. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

KB5126836: Windows Server 2012 R2 Security Update (October 2026)

The remote Windows host is missing security update 5126836. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

CentOS Linux 6 [TuxCare] Security Update: httpd / httpd-devel / httpd-manual / httpd-tools / mod_ssl (CENTOS6:CLSA-2026:1791487835)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1791487835 advisory. - Stack-based buffer overflow in modvhostalias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote...

Microsoft Windows: CVE-2026-70207: Network Policy Server (NPS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Network Policy Server NPS allows an authorized attacker to execute code over a network...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Apache HTTP Server vulnerabilities (USN-8898-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8898-1 advisory. It was discovered that Apache HTTP Server's modrewrite module incorrectly handled...

CVE-2026-68883: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-85905: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally...

KB5127648: Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 Version 26H2 Security Update (October 2026)

The remote Windows host is missing security update 5127648. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...

CVE-2026-97833: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-101294: Missing Cryptographic Step

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptographic signature verification due to improper verification of cryptographic signature...

Microsoft Windows: CVE-2026-85905: Windows UI Immersive Server API Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally...

Oracle Linux 9 : xorg-x11-server (ELSA-2026-82015)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-82015 advisory. 1.20.11-34.4 - CVE fix for: CVE-2026-88812, CVE-2026-93521, CVE-2026-93523 Resolves: https://redhat.atlassian.net/browse/RHEL-278161 Resolves:...