PT-2026-87043

When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...

PT-2026-88475

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-87704

🚨 HIGH SEVERITY: CVE-2026-69767 CVSS 8.8 Use-after-free in MS Office PowerPoint enables remote code execution. Network-based attack, no privileges required. Patch immediately. CVE Vulnerability PatchNow https://t.co/Z8mtFG8Rrb...

PT-2026-88633

Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

ALSA-2026:64810 Moderate: expat security update

Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow CVE-2026-56132 For more details about the security...

PT-2026-87649

🚨 HIGH SEVERITY: CVE-2026-69678 CVSS 8.8 Use-after-free flaw in Microsoft Office PowerPoint enables remote code execution. Attacker requires user interaction. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/CpB18QSCQG...

PT-2026-88688

Use after free in Chromecast in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88717

Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...

PT-2026-88678

Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...

PT-2026-88748

Use after free in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88594

Use after free in Browser in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88560

Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-87686

🚨Critical - Windows DNS Server Remote Code Execution via Use-After-Free CVE-2026-69730 A use-after-free in the Windows DNS Server service DNS.exe can be triggered remotely by sending crafted DNS requests over the network, corrupting memory and leading to arbitrary code execution as SYSTEM...

PT-2026-88739

Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 153 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 153.0.8010.36 Linux 153.0.8010.36/.37 Windows/Mac contains a number of fixes and improvements -- a list of changes is...

PT-2026-87989

🚨 CRITICAL: CVE-2026-78445 CVSS 9.8 Use-after-free in Windows Services for NFS ONCRPC XDR Driver enables unauthenticated RCE over network. No user interaction required. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/L89LsUn6sU...

AlmaLinux 8 : redis:6 (ALSA-2026:64823)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64823 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Arbitrary code execution via TLS pending-data list...

EulerOS 2.0 SP12 : expat (EulerOS-SA-2026-3333)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a...

EulerOS 2.0 SP12 : expat (EulerOS-SA-2026-3258)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a...

The vulnerability in the `lib/rhashtable.c` component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability in the lib/rhashtable.c component of the Linux operating system is related to the dereferencing of a pointer whose validity period has expired. Exploiting this vulnerability can allow an attacker to cause a service failure...