PT-2026-87330

Name of the Vulnerable Software and Affected Versions Windows CD-ROM Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows CD-ROM Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer...

PT-2026-87340

Name of the Vulnerable Software and Affected Versions Windows Biometric Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Biometric Service. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buff...

PT-2026-87903

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

PT-2026-87570

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow in the Online Certificate Status Protocol OCSP allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program...

PT-2026-87817

Name of the Vulnerable Software and Affected Versions Windows Core Messaging affected versions not specified Description A heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes mo...

PT-2026-87318

Name of the Vulnerable Software and Affected Versions Windows USB Audio Class driver usbaudio.sys affected versions not specified Description A heap-based buffer overflow occurs in the usbaudio.sys driver. This issue allows an authorized attacker to elevate privileges locally on the system. A...

PT-2026-87909

🚨 CVE-2026-73000 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-87884

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

389-ds-base security, bug fix, and enhancement update

2.8.0-10 - Resolves: RHEL-220502 - CVE-2026-18355 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket rhel-9.8.z - Resolves: RHEL-222321 - CVE-2026-18453 389-ds-base: pre-authentication NULL pointer dereference via paged results and...

PT-2026-87261

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an authorized attacker to...

PT-2026-87488

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A heap-based buffer overflow occurs in Windows Error Reporting, which allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow is a...

PT-2026-87906

🚨 CVE-2026-72996 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-88096

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A heap-based buffer overflow in the Microsoft Graphics Component allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A...

PT-2026-87659

Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Encrypting File System EFS, which is a feature that provides file-level encryption. This flaw allows an authorize...

AlmaLinux 8 : expat (ALSA-2026:64809)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64809 advisory. expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking CVE-2026-50219 expat: libexpat: Arbitrary Code Execution via...

RHEL 7 : 389-ds-base (RHSA-2026:64771)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64771 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

RHEL 8 : redhat-ds:11 (RHSA-2026:64792)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64792 advisory. Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the Lightweight Directory Access Protocol...

KB5123066: Windows Server 2012 R2 Security Update (September 2026)

The remote Windows host is missing security update 5123066. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

Adobe Acrobat < 24.001.30429 / 26.002.21901 Multiple Vulnerabilities (APSB26-141) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 24.001.30429 or 26.002.21901. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

KB5124012: Windows 11 Version 26H1 Security Update (September 2026)

The remote Windows host is missing security update 5124012. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...