CVE-2026-20859

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2025-12053

The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...

CVE-2025-12052

The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...

CVE-2025-12050

The drivers in the tool packages use RTLQUERYREGISTRYDIRECT flag to read a registry value to which an untrusted user-mode application may be able to cause a buffer overflow...

PT-2026-2440

Name of the Vulnerable Software and Affected Versions Windows Kernel Driver affected versions not specified Description The drivers within the tool packages utilize the RTL QUERY REGISTRY DIRECT flag when reading a registry value. This process is susceptible to a buffer overflow if an untrusted...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001692)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001692 advisory. A use-after-free vulnerability was found in the Linux kernel in drivers/net/hamradio. This flaw allows a local attacker with a user privilege to cause a denial of...

PT-2026-28979

Уязвимость функции amdgpu userq walk and drop fence drv модуля drivers/gpu/drm/amd/amdgpu/amdgpu userq fence.c драйвера инфраструктуры прямого рендеринга DRI AMD GPU ядра операционной системы Linux связана с распределением ресурсов без ограничений и регулирования. Эксплуатация уязвимости может...

PT-2026-2439

Name of the Vulnerable Software and Affected Versions Windows Kernel Driver affected versions not specified Description The drivers within the tool packages utilize the RTL QUERY REGISTRY DIRECT flag when reading a registry value. This process is susceptible to a buffer overflow if an untrusted...

CVE-2025-71143: Improper Validation of Array Index

In the Linux kernel, the following vulnerability has been resolved: clk: samsung: exynos-clkout: Assign .num before accessing .hws Commit f316cdff8d67 "clk: Annotate struct clkhwonecelldata with countedby" annotated the hws member of 'struct clkhwonecelldata' with countedby, which informs the...

CVE-2026-20859

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2026-20810

Free of memory not on the heap in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

Windows Motorola Soft Modem Driver Elevation of Privilege Vulnerability

Microsoft is aware of vulnerabilities in the third party Motorola Soft Modem drivers that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of smserl64.sys and smserial.sys drivers. The drivers have been removed in the January cumulative...

January 13, 2026—KB5073699 (Security-only update)

January 13, 2026—KB5073699 Security-only update Applies To Windows Server 2008 R2 Premium Assurance Windows Secure Boot certificate expiration Important: Secure Boot certificates used by most Windows devices have started expiring in June 2026. This might affect the ability of certain personal and...

January 13, 2026—KB5073457 (OS Build 20348.4648)

January 13, 2026—KB5073457 OS Build 20348.4648 Applies To Windows Server 2022 This cumulative update for Windows Server 2022 KB5073457, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more about differences...

January 13, 2026—KB5073450 (OS Build 25398.2092)

January 13, 2026—KB5073450 OS Build 25398.2092 Applies To Windows Server, version 23H2 This cumulative update for Windows Server, version 23H2 KB5073450, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. To learn more...

CVE-2025-71098

The CVE CVE-2025-71098 affects the Linux kernel’s IP6_GRE path. Syzbot crashes were caused by ip6gre_header() relying on dynamic dev->needed_headroom/dev->hard_header_len, enabling skb underflow when an skb with insufficient headroom was used (e.g., during mld_sendpack/mld_finish_output pat...

Microsoft Windows Kernel Mode Drivers Resource Management Vulnerability

Microsoft Windows Kernel Mode Drivers is a Windows kernel mode driver from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Kernel Mode Drivers. An attacker could exploit this vulnerability to gain elevated privileges. The following products and...

CVE-2025-71084: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix leaking the multicast GID table reference If the CM ID is destroyed while the CM event for multicast creating is still queued the cancelworksync will prevent the work from running which also prevents destroying the...

CVE-2026-20859: Use After Free

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

Linux Distros Unpatched Vulnerability : CVE-2025-68795

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ethtool: Avoid overflowing userspace buffer on stats query The ethtool -S command operates across three ioctl calls: ETHTOOLGSSETINFO for the size,...