PT-2026-88473

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-88139

A new vulnerability with increased severity was disclosed for Microsoft Windows CVE-2026-83992 https://t.co/cvnfBMK8uB...

PT-2026-87822

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

PT-2026-88548

Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

PT-2026-88609

Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

PT-2026-87509

Use of uninitialized resource in Remote Desktop Client allows an authorized attacker to execute code over a network...

PT-2026-88564

If you're using Google Chrome, check for updates. CVE-2026-87464 is a critical WebGL use-after-free vulnerability that can potentially lead to arbitrary code execution. Chrome 153.0.8010.36 includes the fix. Open Chrome settings and make sure you're running a patched version...

RHEL 8 : gegl (RHSA-2026:64802)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:64802 advisory. GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: GIMP: Arbitrary code execution via heap-based buffe...

Debian dsa-6489 : gir1.2-gst-plugins-base-1.0 - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6489 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6489-1 [email protected] https://www.debian.org/security/ Moritz...

EulerOS 2.0 SP12 : golang (EulerOS-SA-2026-3264)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.CVE-2026-42499 When processing HTTP/...

PT-2026-88471

Acrobat Reader is affected by an Access of Resource Using Incompatible Type 'Type Confusion' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires...

EulerOS 2.0 SP12 : sqlite (EulerOS-SA-2026-3313)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process...

RHEL 10 : expat (RHSA-2026:64810)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64810 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call...

KB5124012: Windows 11 Version 26H1 Security Update (September 2026)

The remote Windows host is missing security update 5124012. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

Fedora 43 : chirp (2026-23b8df7771)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-23b8df7771 advisory. New version fixing arbitrary code execution via crafted Kenwood CSV data. Tenable has extracted the preceding description block directly from the Fedora...

KB5122878: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (September 2026)

The remote Windows host is missing security update 5122878. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

EulerOS 2.0 SP12 : libxml2 (EulerOS-SA-2026-3281)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Use After Free in libxml2's xmlParseInternalSubset from GNOME libxml2 version 2.9.11 to 2.11.0 allows a remote attacker to cause a...

EulerOS 2.0 SP12 : libXfont2 (EulerOS-SA-2026-3272)

According to the versions of the libXfont2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap buffer overflow in pcfReadFont due to missing glyph bounds checking in libXfont2 before 2.0.8 allows attackers authenticated as X client...

NewStart CGSL MAIN 7.02 : gstreamer1 Multiple Vulnerabilities (NS-SA-2026-0093)

The remote NewStart CGSL host, running version MAIN 7.02, has gstreamer1 packages installed that are affected by multiple vulnerabilities: - GStreamer rtpqdm2depay Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code ...

Adobe Acrobat < 24.001.30429 / 26.002.21901 Multiple Vulnerabilities (APSB26-141)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 24.001.30429 or 26.002.21901. It is, therefore, affected by multiple vulnerabilities. - Heap-based Buffer Overflow CWE-122 potentially leading to Arbitrary code execution CVE-2026-81992 - Incorrect Authorizati...