PT-2026-111666

Name of the Vulnerable Software and Affected Versions xen versions prior to 4.22.0 06-1.1 Description A race condition occurs during grant table operations when transitioning between v1 and v2. Specifically, a sequence of v2 to v1 and then back to v2 changes can cause status pages to be freed and...

PT-2026-112510

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A use-after-free condition in Windows NTFS enables an authorized attacker to elevate privileges locally. A use-after-free is a memory corruption issue that occurs when an application...

KB5127648: Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 Version 26H2 Security Update (October 2026)

The remote Windows host is missing security update 5127648. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...

CentOS Linux 8.4 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1791904140)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791904140 advisory. - A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage of...

PT-2026-112511

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free issue in Windows Event Tracing allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continu...

PT-2026-112529

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A use-after-free condition in the Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occur...

PT-2026-112491

Name of the Vulnerable Software and Affected Versions Windows Connected User Experiences and Telemetry affected versions not specified Description A use-after-free condition exists in Windows Connected User Experiences and Telemetry. This allows an authorized attacker to elevate privileges locall...

PT-2026-112504

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free issue in the Now Playing Session Manager allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an applicati...

PT-2026-112544

Name of the Vulnerable Software and Affected Versions Windows Overlay Filter affected versions not specified Description A use-after-free condition in the Windows Overlay Filter allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs wh...

PT-2026-112922

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A use-after-free condition in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

PT-2026-112918

Name of the Vulnerable Software and Affected Versions Windows Failover Cluster affected versions not specified Description A use after free issue exists in Windows Failover Cluster, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Use...

PT-2026-112876

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A use-after-free condition in Windows Management Services allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

PT-2026-112539

Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A use-after-free condition in Windows Hello allows an authorized attacker to elevate privileges locally. A use-after-free is a memory corruption issue that occurs when an application...

PT-2026-112903

Name of the Vulnerable Software and Affected Versions Windows Graphics Kernel affected versions not specified Description A use-after-free condition exists in the Windows Graphics Kernel. This allows an authorized attacker to elevate privileges locally on the system. Use-after-free is a memory...

PT-2026-112921

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A use-after-free condition in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

PT-2026-112896

Name of the Vulnerable Software and Affected Versions Windows Bluetooth Port Driver affected versions not specified Description A use-after-free condition in the Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network. Use-after-free is a memor...

PT-2026-111446

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, and Firefox ESR 153.5...

PT-2026-112916

Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Controller affected versions not specified Description A use-after-free condition occurs in the Windows Storage Spaces Controller, which allows an authorized attacker to elevate privileges locally. Use-after-free is a...

SUSE SLES15: libpython3_10-1_0 / python310 / python310-base / python310-curses / etc (SUSE-SU-2026:4630-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4630-1 advisory. - CVE-2026-7210: xml.parsers.expat and xml.etree.ElementTree use insufficient entropy for Expat hash- flooding protection bsc126496...

Rocky Linux 9.6 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791913022)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791913022 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. In versions below both 7.1.2-19 a...