PT-2026-87892

Use after free in IP Helper allows an unauthorized attacker to execute code over a network...

PT-2026-88018

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

PT-2026-88011

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

PT-2026-88001

🚨 HIGH Severity: CVE-2026-78457 CVSS 7.0 Use-after-free flaw in Windows Security Health Service enables local privilege escalation by authenticated attackers. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/izz322NDMZ...

PT-2026-87912

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

PT-2026-87897

Use after free in Windows DNS allows an unauthorized attacker to execute code over a network...

PT-2026-87918

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized attacker to execute code over a network...

PT-2026-87976

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...

PT-2026-87834

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

PT-2026-87397

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network...

ALSA-2026:64812 Moderate: expat security update

Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow CVE-2026-56132 For more details about the security...

ALSA-2026:64824 Important: redis security, bug fix, and enhancement update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

PT-2026-88739

Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Important: redis:6 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

Moderate: expat security update

Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow CVE-2026-56132 For more details about the security...

EulerOS 2.0 SP12 : xorg-x11-server (EulerOS-SA-2026-3395)

According to the versions of the xorg-x11-server packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A stack-based buffer overflow flaw was found in the X.Org X server and Xwayland. The X server has multiple stack buffers sized...

EulerOS 2.0 SP12 : perl-HTML-Parser (EulerOS-SA-2026-3368)

According to the versions of the perl-HTML-Parser package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HTML::Entities versions before 3.84 for Perl read freed heap memory in decodeentities. The XS routine backing...

NewStart CGSL MAIN 7.02 : tongsuo Multiple Vulnerabilities (NS-SA-2026-0106)

The remote NewStart CGSL host, running version MAIN 7.02, has tongsuo packages installed that are affected by multiple vulnerabilities: - Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may...

EulerOS 2.0 SP12 : perl-HTML-Parser (EulerOS-SA-2026-3293)

According to the versions of the perl-HTML-Parser package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : HTML::Entities versions before 3.84 for Perl read freed heap memory in decodeentities. The XS routine backing...

RHEL 8 : thunderbird (RHSA-2026:65160)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:65160 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the Graphics:...