PT-2026-70484

Name of the Vulnerable Software and Affected Versions User-Mode Power Service UMPS affected versions not specified Description Insufficient granularity of access control in the User-Mode Power Service UMPS allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

PT-2026-70071

Name of the Vulnerable Software and Affected Versions Device Configuration Framework affected versions not specified Description An authentication bypass flaw exists within the Device Configuration Framework. This issue can be exploited by an attacker who has already authenticated using a service...

PT-2026-70436

Name of the Vulnerable Software and Affected Versions Windows Network Connection Broker affected versions not specified Description A double free issue in the Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. A double free occurs when the system attemp...

Linux Distros Unpatched Vulnerability : CVE-2026-73144

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - svxlink - None Ubuntu Linux - GHSA-qccg-7pw6-787v: FRN module: unbounded memory growth CVE-2026-73144 Note that Nessus relies on the presence of...

CVE-2026-72916

creationtimestamp| type| source ---|---|--- 2026-08-10 23:02:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dafhdeyd42noa 2026-08-12 06:12:39+00:00| seen| https://bsky.app/profile/harald.mementomori.social.ap.brid.gy/post/3msuhwgxmzpr2...

CVE-2026-72917

creationtimestamp| type| source ---|---|--- 2026-08-10 22:56:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fgxpfu2szczlh...

CVE-2026-72911

creationtimestamp| type| source ---|---|--- 2026-08-10 21:24:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqzwphlo425 2026-08-10 22:00:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msr3y6rwf324...

MINI-WM7V-6M4G-95WP

Bulletin has no description...

CVE-2026-72862

creationtimestamp| type| source ---|---|--- 2026-08-10 18:58:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dqouw2k46mjyp 2026-08-10 19:26:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msqtdnjmxl27...

CVE-2026-68121

creationtimestamp| type| source ---|---|--- 2026-08-10 17:13:54+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msqlxcqkyu22 2026-08-10 17:13:57+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117072332979193830 2026-09-18 06:48:42+00:00| seen|...

CVE-2026-47754

creationtimestamp| type| source ---|---|--- 2026-08-10 17:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msql7whmi22h 2026-08-10 18:09:18+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msqp2ejjjz2z 2026-08-10 18:09:19+00:00| seen|...

CVE-2026-66701

creationtimestamp| type| source ---|---|--- 2026-08-10 16:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msqipzokt425 2026-08-11 12:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msslrrnorv2i...

CGA-2R7J-72HF-JXQ7

Bulletin has no description...

DEBIAN-CVE-2026-68382

In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Hold device ref until queue teardown completes GuC exec queue destruction can run asynchronously. If the final device put happens from a destroy worker, drmm cleanup can end up draining the same workqueue and deadlock...

DEBIAN-CVE-2026-68372

In the Linux kernel, the following vulnerability has been resolved: usb: core: port: Deattach Type-C connector on component unbind connectorunbind is the mirror of connectorbind, but it is missing the symmetric call to typecdeattach that connectorbind makes via: if portdev-child...

DEBIAN-CVE-2026-68350

In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix OOB read from off-by-two in TX status handler The bounds check in carl9170txprocessstatus uses i cmd-hdr.len / 2 + 1 which is off by two, allowing 2 extra iterations past valid txstatus entries when the...

DEBIAN-CVE-2026-68333

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: put MAC endpoint device on disconnect fslmcgetendpoint returns the MAC endpoint device with a reference taken through devicefindchild. The switch port connect path stores that device in mac-mcdev and keeps it for th...

DEBIAN-CVE-2026-68311

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: guard link STA in decap offload mt7925stasetdecapoffload iterates over the vif validlinks mask when updating decap offload state for an MLO station. The station may not have a link STA for every valid link of...

DEBIAN-CVE-2026-68302

In the Linux kernel, the following vulnerability has been resolved: amt: re-read skb header pointers after every pull Several AMT receive and transmit paths cache a pointer into the skb head iphdr, ipv6hdr, ethhdr or the AMT message header and then call a helper that can reallocate that head befo...

DEBIAN-CVE-2026-68270

In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Avoid possible truncation with calculating visible size Calculating the visible size of the system framebuffer can result in truncation of the result. The calculation uses 32-bit arithmetics, which can overflow if the...