Critical: Red Hat Security Advisory: mod_auth_openidc:2.3 security update

An update for the modauthopenidc:2.3 module is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Critical. A Common...

CVE-2026-33522

Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or...

CVE-2026-33522

Esri ArcGIS Server versions 11.3 through 12.0 are vulnerable to a security flaw allowing a remote, unauthenticated attacker to update service metadata . The root cause is identified as Improper Authorization (CWE-285). A patch is available for versions 12.0, 11.5, and 11.3 in General Availability...

CVE-2026-33522 BUG-000182936 - ArcGIS Server has a security vulnerability.

Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or...

CVE-2026-33522 BUG-000182936 - ArcGIS Server has a security vulnerability.

Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or...

EUVD-2026-110060

Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or...

PT-2026-125081

Esri ArcGIS Server versions 11.3 to 12.0 ONLY allows a remote, unauthenticated attacker to update service metadata. A patch is provided for ArcGIS Server software in General Availability and Extended support status, which includes versions 12.0, 11.5, and 11.3. Other versions are in mature or...

Esri ArcGIS Server authorization issue vulnerability

Versions 11.3 through 12.0 of Esri ArcGIS Server contain an authorization issue vulnerability. This vulnerability stems from improper permission control, allowing remote unauthenticated attackers to update service metadata...

Important: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring Syst...

CVE-2026-83499

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-81969

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70142

Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70139

Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70056

Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-105009

Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-100203

Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-100200

Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-100398

Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-105009

A local privilege escalation vulnerability exists in the Windows Server Update Service due to incorrect default permissions (CWE-276). An authorized attacker can exploit this flaw to elevate privileges locally. While the CVSS 3.1 score reflects a High severity (7.5), the attack requires low privi...

CVE-2026-100203

A heap-based buffer overflow exists in the Windows Update Service , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified as High severity with a CVSS 3.1 score of 7.0. While the root cause is identified as a heap overflow, specific file ...