ROS-20260908-73-0013

The vulnerability in Java 1.8.0-openjdk is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20260908-73-0009

The vulnerability in Java-21-openjdk is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20260908-73-0008

The vulnerability in Java-17-openJDK is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20260908-73-0015

The vulnerability in Java-17-openJDK is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20260908-73-0017

The vulnerability in Java-25-openJDK is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2026-87765

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

PT-2026-87473

Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...

PT-2026-87638

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network...

PT-2026-87733

Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...

PT-2026-87604

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network...

PT-2026-88250

In tt face colr blend layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88244

A PoC/exploit has been discovered for vulnerability CVE-2026-49881 PT ID: PT-2026-88244 Vendor: Google Product: Android Description: In serviceClassExists of https://t.co/0gk5mCbseo, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation...

PT-2026-87146

A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authentication under certain configurations. Subsequent authorization queries may execute under an unintended LDAP identity rather than the...

PT-2026-87882

Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...

Adobe Acrobat < 24.001.30429 / 26.002.21901 Multiple Vulnerabilities (APSB26-141) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 24.001.30429 or 26.002.21901. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

EulerOS 2.0 SP12 : kernel (EulerOS-SA-2026-3270)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : dlm: validate length in dlmsearchrsbtreeCVE-2026-43125 net: annotate data-races around sk-skdataready,writespaceCVE-2026-23302 netfilter: ctnetlin...

The vulnerability of the /api/connections file of the JWT Refresh Token Handler software platform for automated file exchange with Cleo Harmony allows a malicious actor to escalate their privileges and gain unauthorized access to protected information.

The vulnerability of the /api/connections file of the JWT Refresh Token Handler component of the software platform for automated file exchange in Cleo Harmony is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges and gain...

PT-2026-88221

In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

KLA91270 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user...

Security update for systemd (moderate)

openSUSE security update: security update for systemd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21754-1 Rating: moderate References: bsc1237515 bsc1254924 bsc1259418 bsc1259650 bsc1261400 bsc1271444 Cross-References: CVE-2026-16742...