Microsoft Windows: CVE-2026-85829: Windows Wired AutoConfig Service Elevation of Privilege Vulnerability

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally...

PT-2026-112985

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...

PT-2026-113240

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...

CVE-2026-108132: Double Free

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

PT-2026-113258

Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...

KB5127646: Windows 11 Version 26H1 Security Update (October 2026)

The remote Windows host is missing security update 5127646. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...

AlmaLinux 9.2 [TuxCare] Security Update: cups / cups-client / cups-devel / cups-filesystem / cups-ipptool / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1791915424)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791915424 advisory. - OpenPrinting CUPS through 2.4.20 contains a resource-exhaustion vulnerability in the submission-timeout handling of cupsdCheckJobs...

SUSE SLES15 Security Update : unbound (SUSE-SU-2026:4624-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4624-1 advisory. - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' bsc1280403. - CVE-2026-77955: Possible ZONEMD verification bypass...

Security Updates for Microsoft Office Online Server (October 2026)

The Microsoft Office Online Server or Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

SUSE SLES15: libpython3_10-1_0 / python310 / python310-base / python310-curses / etc (SUSE-SU-2026:4630-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4630-1 advisory. - CVE-2026-7210: xml.parsers.expat and xml.etree.ElementTree use insufficient entropy for Expat hash- flooding protection bsc126496...

Windows Deployment Services Code Execution

The vulnerability of Windows Deployment Services for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to the use of memory after it is released. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to the use of memory after it is released. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Windows authentication Privilege Escalation

The vulnerability of Windows operating system authentication methods is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Deployment Services Code Execution

The vulnerability of Windows Deployment Services for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Modern Device Management Privilege Escalation

The vulnerability of the Modern Device Management MDM component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Modern Device Management Privilege Escalation

The vulnerability of the Modern Device Management MDM component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to cause a service failure...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to the use of memory after it is released. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to the use of memory after it is released. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...