CVE-2026-28618: Heap-based Buffer Overflow

In decfrmprepare of oapv.c, there is a possible OOB write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-87679

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

PT-2026-88151

Name of the Vulnerable Software and Affected Versions Windows 10 versions 1607 through 10.0.14393.9511 Windows 10 versions 1809 through 10.0.17763.9244 Windows 10 versions 21H2 through 10.0.19044.7724 Windows 10 versions 22H2 through 10.0.19045.7724 Windows Server 2012 versions prior to...

PT-2026-87921

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A heap-based buffer overflow occurs in Windows Management Services, which allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow ...

PT-2026-87710

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...

PT-2026-87387

Name of the Vulnerable Software and Affected Versions Windows Print Spooler Components affected versions not specified Description A heap-based buffer overflow occurs in the Windows Print Spooler Components. This issue allows an authorized attacker to elevate privileges over a network. A heap-bas...

PT-2026-87369

Name of the Vulnerable Software and Affected Versions Microsoft JScript affected versions not specified Description A heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow...

PT-2026-88522

The following issues are included in Project Mainline components. Subcomponent CVE ART CVE-2026-28664 Media Framework components CVE-2026-28609, CVE-2026-45527 Documents UI CVE-2026-28636 Media Codecs CVE-2026-28618, CVE-2026-55294 Media Provider CVE-2026-28622, CVE-2026-28638, CVE-2026-28671,...

PT-2026-87596

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

PT-2026-87624

Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network...

PT-2026-87464

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-87389

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A heap-based buffer overflow occurs in Windows Win32K, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that...

RHEL 9 : 389-ds-base (RHSA-2026:64784)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64784 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

RHEL 8 : 389-ds:1.4 (RHSA-2026:64789)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64789 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

RHEL 10 : 389-ds-base (RHSA-2026:64804)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64804 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDA...

RHEL 8 : expat (RHSA-2026:64809)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64809 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call...

EulerOS 2.0 SP12 : libssh2 (EulerOS-SA-2026-3279)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libssh2 through 1.11.1 reads an attacker-controlled 32-bit attribute count from a publickey-subsystem response and uses it in the allocation...

Adobe Photoshop 26.x < 26.11.7 / 27.x < 27.7 Multiple Vulnerabilities (APSB26-130)

The version of Adobe Photoshop installed on the remote Windows host is prior to 26.11.7/27.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-130 advisory. - Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in...

Oracle Linux 10 : ELSA-2026-64785-0: / 389-ds-base (ELSA-2026-647850)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-647850 advisory. - Resolves: RHEL-220500 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket...

EulerOS 2.0 SP12 : rpm (EulerOS-SA-2026-3307)

According to the versions of the rpm packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap-based buffer overflow vulnerability was found in RPM's NDB New Database backend in the lib/backend/ndb/rpmpkg.c file. This vulnerability is...