Windows Active Directory Domain Services Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...

PT-2026-70918

A flaw was found in FreeIPA. The trust-fetch-domains command is gated by a read-only permission on the trust object rather than a trust-administration permission, allowing an authenticated, non-privileged IPA user to trigger a privileged Active Directory trust refresh using an attacker-supplied...

KB5120249: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (August 2026)

The remote Windows host is missing security update 5120249. It is, therefore, affected by multiple vulnerabilities - Improper neutralization of special elements used in a command 'command injection' in Windows Active Directory allows an unauthorized attacker to execute code over a network...

PT-2026-70385

Name of the Vulnerable Software and Affected Versions Windows Active Directory affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized remote attacker to execute arbitrary code over a network and...

PT-2026-70672

Name of the Vulnerable Software and Affected Versions Windows Active Directory affected versions not specified Description Inadequate encryption strength allows an authorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the...

2026.3 IPU, Intel® Chipset Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® Active Management Technology Intel® AMT and some Intel® Standard Manageability may allow denial of service or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details:...

PT-2026-70558

Name of the Vulnerable Software and Affected Versions Active Directory Certificate Services affected versions not specified Description A use after free issue in Active Directory Certificate Services allows an authorized attacker to execute arbitrary code over a network, which can affect the...

KB5121003: Windows 11 Version 24H2 / Windows 11 Version 25H2 Security Update (August 2026)

The remote Windows host is missing security update 5121003 or hotpatch 5120994. It is, therefore, affected by multiple vulnerabilities - Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. CVE-2026-62815 - Improper neutralization of special elements us...

CVE-2025-32736

PingFederate Administrative Console is affected by a CSRF vulnerability affecting versions before 13.1. An attacker could trigger unauthorized actions via specially crafted links while an admin has an active session. Underlying issue is CSRF in the Administrative Console; exploitation is indicate...

CVE-2021-34498

creationtimestamp| type| source ---|---|--- 2026-08-10 18:06:20+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3msqov3kmi42x...

CVE-2026-68248

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Return NULL on error in activeinstance Avoid returning &node-base when node is NULL due to OOM during GFPATOMIC allocation. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry picked...

CVE-2026-68206

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC active reference counts HEVC slice parameters are shared stateless V4L2 controls, but the common validation path does not verify the active L0/L1 reference counts before driver-specific code...

CVE-2026-68152

In the Linux kernel, the following vulnerability has been resolved: amt: fix use-after-free in AMT delayed works When an AMT device is removed, pending delayed works can still access the freed amtdev structure, which may result in kernel crashes or memory corruption. amtdevstop cancels reqwq and...

CVE-2026-68248 drm/i915: Return NULL on error in active_instance

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Return NULL on error in activeinstance Avoid returning &node-base when node is NULL due to OOM during GFPATOMIC allocation. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry picked...

EUVD-2026-55349

In the Linux kernel, the following vulnerability has been resolved: drm/i915: Return NULL on error in activeinstance Avoid returning &node-base when node is NULL due to OOM during GFPATOMIC allocation. Discovered using AI-assisted static analysis confirmed by Intel Product Security. cherry picked...

CVE-2026-68248

CVE-2026-68248 affects the Linux kernel DRM/i915 driver. The vulnerability arises in the active_instance error path where a NULL node could be used, due to OOM during GFP_ATOMIC allocation, leading to unsafe return of a pointer. The fix modifies the path to return NULL on error instead of derefer...

CVE-2026-68206

The CVE-2026-68206 entry pertains to the Linux kernel, specifically the media: v4l2-ctrls path for HEVC, where the common validation of slice parameters did not verify active L0/L1 reference counts before driver-specific code ran. Red Hat, Ubuntu, Debian, NVD, and other sources describe a flaw th...

CVE-2026-68206 media: v4l2-ctrls: validate HEVC active reference counts

In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC active reference counts HEVC slice parameters are shared stateless V4L2 controls, but the common validation path does not verify the active L0/L1 reference counts before driver-specific code...

EUVD-2026-55538

In the Linux kernel, the following vulnerability has been resolved: amt: fix use-after-free in AMT delayed works When an AMT device is removed, pending delayed works can still access the freed amtdev structure, which may result in kernel crashes or memory corruption. amtdevstop cancels reqwq and...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/sched: ets: Remove a drr class from the active list if it changes to strict. Whenever a user issues a ets qdisc change command, transforming a drr class into a strict one, the ets code does not check whether that class was in...