PT-2026-113237

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

PT-2026-112738

Name of the Vulnerable Software and Affected Versions Windows Phone Service affected versions not specified Description A race condition exists in the Windows Phone Service, where concurrent execution using a shared resource occurs without proper synchronization. This flaw allows an authorized...

PT-2026-112721

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description An out-of-bounds read in the Windows Device Association Service allows an authorized attacker to disclose information over a network. An out-of-bounds read occurs...

Microsoft Windows: CVE-2026-83703: Windows Wi-Fi Driver Denial of Service Vulnerability

Out-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network...

Microsoft Windows: CVE-2026-84007: Remote Desktop Gateway Service Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Gateway Service allows an authorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-83507: Windows Update Orchestrator Service Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85831: Windows Biometric Service Information Disclosure Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83647: Windows Active Directory Domain Services Denial of Service Vulnerability

Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-83655: Network Policy Server (NPS) Denial of Service Vulnerability

Out-of-bounds read in Network Policy Server NPS allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-83635: Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-84016: Windows EAPHost Service Elevation of Privilege Vulnerability

Out-of-bounds write in Windows EAPHost Service allows an authorized attacker to elevate privileges locally...

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to cause a service failure...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : GStreamer Ugly Plugins vulnerabilities (USN-8896-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8896-1 advisory. Michael Randrianantenaina discovered that GStreamer's Ugly Plugins incorrectly handled certai...

ROS-20261013-73-0444

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0329

The vulnerability of the invlpgainterception function in the arch/x86/kvm/svm/svm.c module of the virtualization subsystem on the Linux kernel-based x86 platform is related to error handling deficiencies. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0026

The vulnerability of the drivers/net/usb/catc.c component in the Linux operating system is related to insufficient checking of the type of input data provided. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0320

The vulnerability of the authgss module in the Linux operating system’s kernel is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20261013-73-0084

The vulnerability in the kernel-lt is related to the use of a name with an incorrect reference. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0473

The vulnerability in the kernel-lt is related to the lack of memory release after the effective lifespan has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0294

The vulnerability of the dorbdadd function in the drivers/block/rbd.c module of the Linux kernel’s block devices driver is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...