SUSE SLES15 Security Update : kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP5) (SUSE-SU-2026:2868-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2868-1 advisory. This update for the SUSE Linux Enterprise Kernel 5.14.21-150500.55.121 fixes various security issues The following security issues were fixed: ...

PT-2026-58327

Name of the Vulnerable Software and Affected Versions Windows affected versions prior to July 2026 patchday Description An incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally. This issue occurs due to a bad type cast, which is a...

PT-2026-58668

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A use-after-free and double-free condition exists in the DirectX Graphics Kernel dxgkrnl. The issue occurs during the rollback process of a failed D3DKMTCreateAllocation function call...

PT-2026-58695

Name of the Vulnerable Software and Affected Versions Microsoft Configuration Manager version 2509 Description Improper access control allows an authorized attacker to elevate privileges over a network. This issue can be part of an exploit chain involving broken access, CAB arbitrary-write path...

PT-2026-58267

Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network...

PT-2026-58718

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Microsoft Visual Studio affected versions not specified Description An issue exists in the deserialization mechanism of .NET and Microsoft Visual Studio. Deserialization is the process of converting a strea...

PT-2026-58384

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Insufficient granularity of access control in the Windows Filtering Platform WFP, which acts as a traffic management system for the Windows Firewall, allows an authorized attacker to elevate...

PT-2026-58155

Name of the Vulnerable Software and Affected Versions Windows Clipboard Server affected versions not specified Description A race condition occurs in the Windows Clipboard Server due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges...

PT-2026-58716

Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an unauthorized attacker t...

PT-2026-58191

Name of the Vulnerable Software and Affected Versions Windows Server affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges locally, effectively turning a basic login into a mechanism for privilege escalation. Recommendations Deploy...

PT-2026-58717

Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description An issue exists where resources are allocated without limits or throttling, allowing an unauthorized attacker to cause a denial of service over a network. Recommendations At the moment...

PT-2026-58159

Name of the Vulnerable Software and Affected Versions Windows HTTP.sys affected versions not specified Description An issue exists in Windows HTTP.sys where resources are allocated without limits or throttling. This allows an unauthorized attacker to cause a denial-of-service condition over a...

PT-2026-58607

Name of the Vulnerable Software and Affected Versions Windows 10 Windows 11 Windows Server affected versions not specified Description An uninitialized resource flaw in the Windows Remote Desktop Protocol RDP allows an unauthorized and unauthenticated attacker to execute arbitrary code over a...

PT-2026-58479

Name of the Vulnerable Software and Affected Versions Windows Message Queuing affected versions not specified Description A use after free issue in Windows Message Queuing allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Use after free is a memo...

PT-2026-58635

Name of the Vulnerable Software and Affected Versions .NET 8 .NET 9 .NET 10 Description An issue involving type confusion, which occurs when a program uses a resource with a type that is incompatible with the expected type, allows an unauthorized attacker to cause a denial of service over a...

CVE-2025-56363

A null pointer dereference vulnerability exists in the Matter SDK connectedhomeip before 1.4.0, affecting the ReadRevisionAttribute function used in multiple clusters Channel, Account Login, TargetNavigator, etc.. The function lacks proper validation of the delegate pointer before dereferencing. ...

PT-2026-58196

Name of the Vulnerable Software and Affected Versions Windows Spaceport.sys affected versions not specified Description Missing authentication for a critical function in the Spaceport.sys driver allows an authorized attacker to elevate privileges locally on the system. Recommendations At the...

PT-2026-58487

Name of the Vulnerable Software and Affected Versions Windows 10 affected versions not specified Windows 11 affected versions not specified Windows Server 2016 affected versions not specified Windows Server 2019 affected versions not specified Windows Server 2022 affected versions not specified...

PT-2026-58616

Name of the Vulnerable Software and Affected Versions Windows Remote Access Service Infrastructure affected versions not specified Description An integer overflow or wraparound in the Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network...

PT-2026-58143

Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Direct affected versions not specified Description An integer overflow or wraparound occurs in Windows Storage Spaces Direct, which could allow an unauthorized attacker to elevate privileges through a physical attack...