CVE-2026-94453: Use After Free

Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet retransmit or malicious is received for the same tuple. IKE state is retained in memory after the client closes the connection, storing a pointer to...

Microsoft Windows: CVE-2026-77496: Windows Imaging Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

PT-2026-113280

🚨 CVE-2026-103838 Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. 🎖@cveNotify...

Microsoft Windows: CVE-2026-70157: Windows System Information Console Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...

CVE-2026-102870: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...

CVE-2026-103836: Out-of-bounds Write

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-111579

Name of the Vulnerable Software and Affected Versions AMI APTIOV affected versions not specified Description An issue exists in the BIOS that allows local users to trigger an Out-of-bounds Write, which occurs when data is written outside the intended memory boundary. This can lead to buffer...

Microsoft Windows: CVE-2026-83517: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

CVE-2026-100128: Out-of-bounds Write

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-85811: Use After Free

Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over an adjacent network...

PT-2026-113490

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description A use after free issue exists in the Passwords component. This allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox by...

Microsoft Windows: CVE-2026-85809: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...

CVE-2026-85799: Use After Free

Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...

CVE-2026-103837: Out-of-bounds Write

Substance3D - Stager is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-83642: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in DNS Server allows an unauthorized attacker to execute code over a network...

Important: libreoffice security update

LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a spreadsheet, a presentation manager, a formula editor, and a drawing program. LibreOffice replaces OpenOffice and provides a similar but enhanced and...

CVE-2026-97749: Double Free

Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

UBUNTU-CVE-2026-107615

An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init and ThemeLib load screenhooks32.dll / screenhooks64.dll with LoadLibrary using a bare fi...

Microsoft Windows: CVE-2026-83916: Windows Error Reporting Remote Code Execution Vulnerability

Double free in Windows Error Reporting allows an authorized attacker to execute code locally...

PT-2026-112288

Name of the Vulnerable Software and Affected Versions Remote Desktop Gateway Service affected versions not specified Description A use after free issue in the Remote Desktop Gateway Service allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use...