PT-2026-87477

A newly disclosed Windows BitLocker vulnerability CVE-2026-69449 could let attackers execute arbitrary code via local or network paths. Affected versions span Windows 10, Windows 11, and all recent Windows Server releases. Microsoft rates the risk “Important” yet “Exploitation Less Likely,” and h...

PT-2026-87770

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally...

PT-2026-87304

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...

PT-2026-87253

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an authorized attacker to...

PT-2026-88151

Name of the Vulnerable Software and Affected Versions Windows 10 versions 1607 through 10.0.14393.9511 Windows 10 versions 1809 through 10.0.17763.9244 Windows 10 versions 21H2 through 10.0.19044.7724 Windows 10 versions 22H2 through 10.0.19045.7724 Windows Server 2012 versions prior to...

PT-2026-88251

In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-87851

Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network...

PT-2026-87388

Name of the Vulnerable Software and Affected Versions Windows Fast FAT Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Fast FAT Driver. This issue allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially...

PT-2026-87835

Name of the Vulnerable Software and Affected Versions Windows Remote Access Connection Manager affected versions not specified Description A heap-based buffer overflow occurs in the Windows Remote Access Connection Manager. This issue allows an authorized attacker to execute arbitrary code locall...

PT-2026-87626

Name of the Vulnerable Software and Affected Versions Windows Connected User Experiences and Telemetry affected versions not specified Description A heap-based buffer overflow occurs in Windows Connected User Experiences and Telemetry. This issue allows an authorized attacker to elevate privilege...

PT-2026-88143

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

PT-2026-88229

Android’s September 2026 security update fixed 180 issues. The one that stands out is CVE-2026-28662: Wi-Fi related memory corruption that can lead to remote code execution with no user interaction and no additional privileges. Still the class of bug that turns a nearby attacker into a device own...

389-ds-base security, bug fix, and enhancement update

3.2.0-10 - Bump version to 3.2.0-10 - Resolves: RHEL-220500 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket rhel-10.2.z - Resolves: RHEL-222320 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference vi...

PT-2026-87494

Name of the Vulnerable Software and Affected Versions Windows Volume Manager Extension Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Volume Manager Extension Driver. This issue allows an authorized attacker to elevate privileges locally on t...

PT-2026-87243

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized remote attacke...

PT-2026-87728

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...

NewStart CGSL MAIN 7.02 : libssh2 Multiple Vulnerabilities (NS-SA-2026-0094)

The remote NewStart CGSL host, running version MAIN 7.02, has libssh2 packages installed that are affected by multiple vulnerabilities: - A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file src/userauth.c. Such...

EulerOS 2.0 SP12 : sqlite (EulerOS-SA-2026-3313)

According to the versions of the sqlite packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : SQLite before 3.53.2 contains memory corruption vulnerabilities in the FTS5 full-text search extension that allow attackers to cause process...

Adobe Reader < 26.002.21901 Multiple Vulnerabilities (APSB26-141) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 26.002.21901. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that...

RHEL 10 : glib2 (RHSA-2026:64799)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:64799 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, t...