CVE-2026-102214: Use After Free

Use after free in Windows Hyper-V allows an authorized attacker to execute code locally...

CVE-2026-100218: Use After Free

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

PT-2026-113258

Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...

PT-2026-112707

Name of the Vulnerable Software and Affected Versions Windows Print Spooler Components affected versions not specified Description A use after free issue in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw tha...

PT-2026-112258

Name of the Vulnerable Software and Affected Versions Windows Direct Composition affected versions not specified Description A use after free issue in Windows Direct Composition allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs whe...

PT-2026-112434

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A use-after-free condition in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

MiracleLinux 9 : python3.14-3.14.8-1.el9_8 (AXSA:2026-2028:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2028:08 advisory. python: python: Certificate verification bypass via missing serverhostname validation in SSLContext.wrapbio CVE-2026-19553 python: Use-after-free of...

PT-2026-116216

Уязвимость компонента Queue Manager службы очереди сообщений Microsoft Message Queuing MSMQ операционных систем Windows связана с использованием памяти после ее освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

PT-2026-112208

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A use after free issue in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption...

CentOS Linux 7 [TuxCare] Security Update: freerdp / freerdp-devel / freerdp-libs / libwinpr / libwinpr-devel Multiple Vulnerabilities (CENTOS7:CLSA-2026:1791568721)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1791568721 advisory. - FreeRDP versions before 3.31.0 contain a heap buffer overflow vulnerability in negosendnegotiationrequest that fails to validate the...

SUSE SLES12: openssh8.4 / openssh8.4-clients / openssh8.4-common / etc (SUSE-SU-2026:4614-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4614-1 advisory. - CVE-2026-73282: unsynchronized remote forwarding updates in SSH client multiplexing can cause use-after- free bsc1275074. -...

SUSE SLED15: libunbound8 / unbound / unbound-anchor / unbound-devel / etc (SUSE-SU-2026:4620-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4620-1 advisory. - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' bsc1280403. - CVE-2026-77955: Possible ZONEM...

PT-2026-111528

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0-beta1 through 3.31.0 Description An issue exists in smartcard handling where a use-after-free condition occurs. This allows an attacker to access a freed smartcard handle object following an invalid connect operation. By...

CVE-2026-109676: Use After Free

FreeRDP from 3.0.0-beta1 before 3.32.0 contains a use-after-free vulnerability in smartcard handling that allows attackers to access a freed smartcard handle object after an invalid connect operation. Attackers can trigger an invalid smartcard connect operation to cause reuse of the freed handle,...

SUSE SLES15 Security Update : unbound (SUSE-SU-2026:4624-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4624-1 advisory. - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' bsc1280403. - CVE-2026-77955: Possible ZONEMD verification bypass...

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2026:4627-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4627-1 advisory. Update to Mozilla Thunderbird 153.4 MFSA 2026-96, MFSA 2026-103, bsc1280371, bsc1282929: - CVE-2026-92005:...

Microsoft Windows: CVE-2026-69765: Windows Storport Miniport Driver Remote Code Execution Vulnerability

Use after free in Windows Storport Miniport Driver allows an unauthorized attacker to execute code over a network...

PT-2026-111894

Name of the Vulnerable Software and Affected Versions Microsoft QUIC versions Windows 11 23H2 through 26H2 Microsoft QUIC versions Windows Server 2022 through 2025 Description A use-after-free issue in Microsoft QUIC allows an unauthorized attacker to execute code over a network. This occurs when...

Microsoft Windows: CVE-2026-70168: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

PT-2026-113470

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description A use after free issue exists in ShapeDetection. This allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox by using a...