Important: xmlrpc-c security update

XML-RPC is a remote procedure call RPC protocol that uses XML to encode its calls and HTTP as a transport mechanism. The xmlrpc-c packages provide a network protocol to allow a client program to make a simple RPC remote procedure call over the Internet. It converts an RPC into an XML document,...

PT-2026-87776

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A use after free issue exists in Windows Error Reporting. This allows an authorized attacker to elevate privileges locally on the system. Use after free is a memory corruption...

PT-2026-87402

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-88285

Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network...

PT-2026-88228

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the getAllSessions function across multiple files creates a confused deputy scenario. This issue allows for local information disclosure without...

PT-2026-88233

In LimitRealloc of malloc limit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-87561

Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network...

CVE-2026-69462: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...

CVE-2026-69612: Absolute Path Traversal

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-88227

Name of the Vulnerable Software and Affected Versions AccountsDb.java affected versions not specified Description A logic error exists in the findMetaAuthUid function within AccountsDb.java, which may allow a Factory Reset Protection FRP bypass. FRP is a security feature that prevents unauthorize...

CVE-2026-69578: Numeric Truncation Error

Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-28642: Protection Mechanism Failure

In executeRequest of ActivityStarter.java, there is a possible background activity launch due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ROS-20260908-73-0045

The vulnerability in nvidia-kmod is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-87533

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-87232

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An authorized attacker can disclose sensitive information over a network due to the generation of error messages that contain sensitive data. Recommendations At the moment, there is no...

CVE-2026-69535: Numeric Truncation Error

Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

PT-2026-87488

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A heap-based buffer overflow occurs in Windows Error Reporting, which allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow is a...

CVE-2026-85485: Improper Neutralization of Input During Web Page Generation

HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table form layout and the Bootstrap 2 and 3 wrappers splice each error string straight into the surrounding markup. Version 0.410000, the fix for CVE-2026-19872, escaped the equivalent...

PT-2026-88452

HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table form layout and the Bootstrap 2 and 3 wrappers splice each error string straight into the surrounding markup. Version 0.410000, the fix for CVE-2026-19872, escaped the equivalent...

PT-2026-88244

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A logic error in the serviceClassExists function within InCallController.java allows for arbitrary code execution. This issue can lead to local escalation of privilege without requiring...