389-ds-base security, bug fix, and enhancement update

3.2.0-10 - Bump version to 3.2.0-10 - Resolves: RHEL-220500 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket rhel-10.2.z - Resolves: RHEL-222320 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference vi...

389-ds-base security, bug fix, and enhancement update

2.8.0-10 - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket rhel-9.8.z - Resolves: RHEL-222321 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and...

PT-2026-87992

🚨 CVE-2026-78448 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-88120

🚨 CVE-2026-83972 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-88034

🚨 CVE-2026-80075 Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-87652

🚨 HIGH SEVERITY: CVE-2026-69681 CVSS 8.0 Heap buffer overflow in Virtual Hard Disk VHD Miniport Driver enables privilege escalation via network. Authorized attacker required. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/QbIbJXhzbo...

PT-2026-87534

🚨 HIGH SEVERITY: CVE-2026-69514 CVSS 7.5 Heap buffer overflow in Windows Remote Desktop Services enables remote code execution by authenticated attackers. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/h112imW6bc...

RHEL 8 : 389-ds:1.4 (RHSA-2026:64789)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64789 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

RHEL 8 : expat (RHSA-2026:64809)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64809 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: libexpat: Use-after-free vulnerability due to improper handler call...

PT-2026-88145

🚨 CVE-2026-84000 Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally. 🎖@cveNotify...

PT-2026-87820

🚨 CVE-2026-70586 MS Paint CVSS 8.8. heap buffer overflow. Microsoft: Remote Code Execution also Microsoft: victim opens your file so the kill chain is email a doodle, they open it in Paint to "fix one letter", code runs. we hardened the kernel for a decade. Paint still eats files like it is 1995...

PT-2026-87975

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...

glib2 security update

2.68.4-19.10 - Fix CVE-2026-16118: heap-buffer-overflow in xdgmimemagic.c...

Adobe Reader < 26.002.21901 Multiple Vulnerabilities (APSB26-141) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 26.002.21901. It is, therefore, affected by multiple vulnerabilities. - Heap-based Buffer Overflow CWE-122 potentially leading to Arbitrary code execution CVE-2026-81992 - Incorrect Authorization CWE-863...

RHEL 10 : glib2 (RHSA-2026:64799)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:64799 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, t...

RHEL 8 : 389-ds:1.4 (RHSA-2026:64776)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64776 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

KB5124008: Windows 11 Version 24H2 / 25H2 / 26H2 Security Update (September 2026)

The remote Windows host is missing security update 5124008. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

EulerOS 2.0 SP12 : spice-vdagent (EulerOS-SA-2026-3387)

According to the versions of the spice-vdagent packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write arbitrary files ...

RHEL 8 : 389-ds:1.4 (RHSA-2026:64791)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64791 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

KB5123066: Windows Server 2012 R2 Security Update (September 2026)

The remote Windows host is missing security update 5123066. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...