PT-2026-87276

Name of the Vulnerable Software and Affected Versions Windows USB Mass Storage Class Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows USB Mass Storage Class Driver. This issue allows an unauthorized remote attacker to execute arbitrary code and...

Release Information for Veeam Plug-In for Microsoft Azure 9.1

Release Information 13.9.1.407 2026-09-08 Resolved issues General Storage account credentials are stored in plain text on worker appliances. Configuration Backup Configuration backup for the managed backup appliance fails after upgrading Veeam Backup & Replication to version 13.1. Under certain...

ROS-20260908-73-0059

The vulnerability in nvidia-kmod is related to improper storage of resolutions. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2026-87863

Name of the Vulnerable Software and Affected Versions Storage Port Driver affected versions not specified Description A heap-based buffer overflow in the Storage Port Driver allows an authorized attacker to elevate privileges locally, potentially leading to full system compromise. A heap-based...

PT-2026-87512

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack...

PT-2026-87294

Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Controller affected versions not specified Description A heap-based buffer overflow occurs in the Windows Storage Spaces Controller. This issue allows an authorized attacker to execute arbitrary code locally or remotely,...

KB5122882: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (September 2026)

The remote Windows host is missing security update 5122882. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

PT-2026-87337

Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Controller affected versions not specified Description A stack-based buffer overflow occurs in the Windows Storage Spaces Controller. This issue allows an authorized attacker to elevate privileges locally on the system. ...

PT-2026-87155

Name of the Vulnerable Software and Affected Versions MongoDB Server affected versions not specified Description An authenticated user with elevated internal privileges can bypass a disabled feature gate in the applyOps command by providing an internal replication mode value not intended for clie...

PT-2026-87281

Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Controller affected versions not specified Description A heap-based buffer overflow exists in the Windows Storage Spaces Controller. This issue allows an authorized low-privilege attacker to execute arbitrary code locall...

PT-2026-87854

Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally...

PT-2026-88718

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An incorrect reference resolution in Storage on Windows allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by...

CVE-2026-69290: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

CVE-2026-69490: Out-of-bounds Read

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-69575: Use After Free

Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

CVE-2026-69568: Out-of-bounds Read

Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally...

CVE-2026-69708: Use After Free

Use after free in Windows Web Platform Storage allows an authorized attacker to elevate privileges locally...

PT-2026-87541

Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally...

PT-2026-88506

Impact The OAuth Dynamic Client Registration endpoints validated field sizes only for redirect uris, leaving client name and grant types bounded by presence checks alone. An unauthenticated remote caller could submit arbitrarily large values in either field and have them persisted to the database...

CVE-2026-86075: Allocation of Resources Without Limits or Throttling

n8n is an open source workflow automation platform. Prior to 2.37.7 and 2.38.2, the OAuth Dynamic Client Registration endpoint bounded redirecturis but accepted arbitrarily large clientname and granttypes values. An unauthenticated remote caller could repeatedly persist oversized values in...