CVE-2026-68876 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

...

EUVD-2026-73408

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-68876

Windows Program Compatibility Assistant Service is affected by a heap-based buffer overflow that allows an authorized attacker to elevate privileges over a network . The CVSS 3.1 score is 8.0 (HIGH) with vector AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H, indicating a network-based attack with low comple...

CVE-2026-68876 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

...

AIs as Modern Genies

This essay was written with Barath Raghavan, and originally appeared inLawfare. In April, an artificial intelligence AI agent conducting a routine task at a company hit a snag, tried to solve it, and soon ended up deleting the company’s database along with all of its backups. In July, OpenAI aske...

CVE-2026-69563

CVE-2026-69563 is a heap-based buffer overflow in the Windows Program Compatibility Assistant Service that allows an authorized attacker to achieve local privilege escalation . The vulnerability carries a CVSS 3.1 score of 7.0 (HIGH) , with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicat...

CVE-2026-69563 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

...

EUVD-2026-73016

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69563 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

...

EUVD-2026-73011

Improper neutralization of special elements used in a command 'command injection' in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69534

CVE-2026-69534 is a command injection vulnerability in the Windows Program Compatibility Assistant Service , caused by improper neutralization of special elements used in a command. An authorized attacker can leverage this flaw to achieve local privilege escalation , with a CVSS 3.1 score of 7.8 ...

CVE-2026-69534 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

...

CVE-2026-69534 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

...

CVE-2026-68845 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

...

EUVD-2026-73199

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-68845 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

...

CVE-2026-68845

CVE-2026-68845 is a heap-based buffer overflow in the Windows Program Compatibility Assistant Service that allows an authorized attacker to perform local privilege escalation . Microsoft rates it HIGH severity (CVSS 3.1: 7.8) with a local attack vector, low complexity, low privileges required, an...

[SECURITY] [DLA 4777-1] linux security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4777-1 [email protected] https://www.debian.org/lts/security/ Salvatore Bonaccorso September 08, 2026 https://wiki.debian.org/LTS -...

GHSA-97QJ-X29F-37W7 NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses

Several XML parsing sites in NLTK still used xml.etree.ElementTree directly, which honours declarations in a document's internal DTD subset. A crafted document a few hundred bytes long can expand to megabytes in memory each nesting level multiplies by ten, a denial-of-service. Affected call sites...

NLTK: Entity-expansion DoS (billion laughs) via remaining raw ElementTree parses

Several XML parsing sites in NLTK still used xml.etree.ElementTree directly, which honours declarations in a document's internal DTD subset. A crafted document a few hundred bytes long can expand to megabytes in memory each nesting level multiplies by ten, a denial-of-service. Affected call sites...