PT-2026-32824

Name of the Vulnerable Software and Affected Versions Desktop Window Manager affected versions not specified Description A use after free issue allows an authorized attacker to elevate privileges locally. Use after free occurs when an application continues to use a pointer after it has been freed...

Microsoft Desktop Windows Manager 资源管理错误漏洞

Microsoft Desktop Windows Manager is a desktop window manager from Microsoft USA. A security vulnerability exists in Microsoft Desktop Windows Manager. An attacker could exploit the vulnerability to elevate privileges...

PT-2026-32786

Name of the Vulnerable Software and Affected Versions Desktop Window Manager affected versions not specified Description A use after free issue allows an authorized attacker to elevate privileges locally. Use after free occurs when an application continues to use a pointer after it has been freed...

Microsoft Desktop Windows Manager 资源管理错误漏洞

Microsoft Desktop Windows Manager is a desktop window manager developed by Microsoft Corporation. There is a resource management vulnerability in Microsoft Desktop Windows Manager. Attackers can exploit this vulnerability to gain elevated privileges. The following products and versions are...

CVE-2026-27923: Use After Free

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-32152: Use After Free

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-32155: Use After Free

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-27924: Use After Free

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

PT-2026-32785

CVE-2026-27923 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. https://t.co/iFFDd0LffD...

PT-2026-32825

CVE-2026-32155 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. https://t.co/YdFtqviArJ...

Microsoft Desktop Windows Manager 资源管理错误漏洞

Microsoft Desktop Windows Manager is a desktop window manager from Microsoft USA. A security vulnerability exists in Microsoft Desktop Windows Manager. An attacker could exploit the vulnerability to elevate privileges...

Microsoft Desktop Windows Manager 资源管理错误漏洞

Microsoft Desktop Windows Manager is a desktop window manager from Microsoft USA. A security vulnerability exists in Microsoft Desktop Windows Manager. An attacker could exploit the vulnerability to elevate privileges...

CVE-2026-32154: Use After Free

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

Microsoft Desktop Windows Manager 资源管理错误漏洞

Microsoft Desktop Windows Manager is a desktop window manager from Microsoft USA. A security vulnerability exists in Microsoft Desktop Windows Manager. An attacker could exploit the vulnerability to elevate privileges...

PT-2026-32822

Name of the Vulnerable Software and Affected Versions Desktop Window Manager affected versions not specified Description A use after free issue allows an authorized attacker to elevate privileges locally. Use after free is a condition where a program continues to use a pointer after it has been...

Node.js: Node.js: Memory leak and Denial of Service via crafted HTTP/2 WINDOW_UPDATE frames

A flaw was found in Node.js. A remote attacker can exploit this vulnerability in Node.js HTTP/2 servers by sending specially crafted WINDOWUPDATE frames on stream 0 connection-level. These frames can cause the flow control window to exceed its maximum value, leading to a memory leak as Http2Sessi...

Node.js: Node.js: Memory leak and Denial of Service via crafted HTTP/2 WINDOW_UPDATE frames

A flaw was found in Node.js. A remote attacker can exploit this vulnerability in Node.js HTTP/2 servers by sending specially crafted WINDOWUPDATE frames on stream 0 connection-level. These frames can cause the flow control window to exceed its maximum value, leading to a memory leak as Http2Sessi...

SUSE CVE-2026-2229

ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of the servermaxwindowbits parameter in the permessage-deflate extension. When a WebSocket client connects to a server, it automatically advertises support for permessage-deflate compression. ...

CVE-2026-35594 Vikunja Link Share JWT tokens remain valid for 72 hours after share deletion or permission downgrade

Vikunja is an open-source self-hosted task management platform. Prior to 2.3.0, Vikunja's link share authentication GetLinkShareFromClaims in pkg/models/linksharing.go constructs authorization objects entirely from JWT claims without any server-side database validation. When a project owner delet...

Node.js: Node.js: Memory leak and Denial of Service via crafted HTTP/2 WINDOW_UPDATE frames

A flaw was found in Node.js. A remote attacker can exploit this vulnerability in Node.js HTTP/2 servers by sending specially crafted WINDOWUPDATE frames on stream 0 connection-level. These frames can cause the flow control window to exceed its maximum value, leading to a memory leak as Http2Sessi...