PT-2026-70578

Name of the Vulnerable Software and Affected Versions Microsoft Office Outlook affected versions not specified Description Insufficiently protected credentials allow an unauthorized attacker to perform spoofing over a network. Spoofing is a technique where an attacker masquerades as another perso...

PT-2026-70462

Name of the Vulnerable Software and Affected Versions Windows Program Compatibility Assistant Service affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows Program Compatibility Assistant Service. This issue allows an authorized attacker to...

PT-2026-70523

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Cloud Files Mini Filter Driver. This issue allows an authorized attacker to elevate privileges locally on the...

PT-2026-70502

Name of the Vulnerable Software and Affected Versions Windows HTTP.sys affected versions not specified Description An integer underflow wrap or wraparound occurs in Windows HTTP.sys, which is the kernel-mode driver that handles HTTP requests. This flaw allows an authorized attacker to elevate...

PT-2026-70579

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is no...

PT-2026-70740

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

PT-2026-70766

Name of the Vulnerable Software and Affected Versions Microsoft Office Outlook affected versions not specified Description An integer overflow or wraparound occurs, allowing an unauthorized attacker to execute arbitrary code over a network and affect the system. An integer overflow is a condition...

PT-2026-70455

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use-after-free condition occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue where an...

PT-2026-70636

Name of the Vulnerable Software and Affected Versions Microsoft Office Access affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70389

Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...

PT-2026-70551

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment...

MAL-2026-13770 Malicious code in @telekom-ods/react-ui-kit (npm)

@telekom-ods/[email protected] ships an install hook that spawns a shell running a reconnaissance/exfiltration one-liner. The captured command reads /etc/passwd and /etc/hosts, runs id, and conditionally reads /etc/shadow if the process has read access, then sends the collected output as the...

Security Update for Microsoft PowerPoint Products (August 2026)

The Microsoft PowerPoint Products are missing a security update. They are, therefore, affected by an information disclosure vulnerability. Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. Note that Nessus has not tested for this...

Linux Distros Unpatched Vulnerability : CVE-2026-71217

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control- channel JSON with oversized numeric parameters, such as...

Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service (cisco-sa-iosxe-bing-MGHrFAkd)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. - A denial of service DoS vulnerability exists in the Blocks Extensible Exchange Protocol BEEP feature of Cisco IOS XE Software due to improper handling of BEEP SOAP requests. An unauthenticated, remote...

RockyLinux 8 : kernel (RLSA-2026:52765)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:52765 advisory. kernel: iio: event: Fix event FIFO reset race CVE-2026-64496 Tenable has extracted the preceding description block directly from the RockyLinux security advisory...

PT-2026-70563

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description A stack-based buffer overflow occurs in the Remote Desktop Client, which allows an unauthorized attacker to execute arbitrary code over a network and affect the system. A...

CVE-2026-51583

An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery SSRF via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address...

Linux Distros Unpatched Vulnerability : CVE-2026-73146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-r2gm-p682-3mpm: svxreflector: use-after-free via reentrant client deletion CVE-2026-73146 Note that Nessus...

PT-2026-70610

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...