CVE-2026-78464: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

PT-2026-87762

Time-of-check time-of-use toctou race condition in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69859: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

PT-2026-88005

Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-69779: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Win32K allows an authorized attacker to elevate privileges locally...

PT-2026-87492

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A time-of-check time-of-use toctou race condition exists in the Windows Kernel. This occurs when a program checks the state of a resource and then acts upon that resource, but the stat...

PT-2026-87714

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A time-of-check time-of-use toctou race condition exists in Windows Win32K. This occurs when a program checks a condition such as a security credential and then uses the result of that...

PT-2026-87730

Time-of-check time-of-use toctou race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69466: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-87469

Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

EulerOS 2.0 SP12 : acl (EulerOS-SA-2026-3321)

According to the versions of the acl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : acl before version 2.4.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability that allows local attackers to escalate privileg...

EulerOS 2.0 SP12 : acl (EulerOS-SA-2026-3246)

According to the versions of the acl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : acl before version 2.4.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability that allows local attackers to escalate privileg...

CVE-2026-69804: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-28671: Time-of-check Time-of-use (TOCTOU) Race Condition

In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

EulerOS 2.0 SP12 : gzip (EulerOS-SA-2026-3266)

According to the versions of the gzip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between...

EulerOS 2.0 SP12 : gzip (EulerOS-SA-2026-3341)

According to the versions of the gzip packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between...

CVE-2026-86469 Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path

A flaw was found in GLib2. When gfilereplace is used with GFILECREATEREPLACEDESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library unlinks the destination and recreates it without exclusive creation or symlink protection. A local attacker who can write to the...

CVE-2026-86469

A race condition flaw in GLib2 's g_file_replace() function allows a local attacker with write access to the destination directory to redirect file writes to an arbitrary file. When the ".goutputstream-XXXXXX" temporary file creation fails, the library unlinks and recreates the destination withou...

CVE-2026-86469 Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path

A flaw was found in GLib2. When gfilereplace is used with GFILECREATEREPLACEDESTINATION and creating the .goutputstream-XXXXXX temporary file fails, the library unlinks the destination and recreates it without exclusive creation or symlink protection. A local attacker who can write to the...

Symlink Attack

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...