KB5122871: Windows Server 2025 Security Update (September 2026)

The remote Windows host is missing security update 5122871. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

PT-2026-87911

🚨 CVE-2026-73002 Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-88301

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-87168

An integer overflow in the query planning component of MongoDB Server can allow an authenticated user with ordinary database-level read/write privileges to bypass an internal resource limit. Submitting a specially crafted query causes the server to consume memory without bound during query...

EulerOS 2.0 SP12 : wget (EulerOS-SA-2026-3319)

According to the versions of the wget packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convertfname function within src/url.c that...

EulerOS 2.0 SP12 : expat (EulerOS-SA-2026-3333)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a...

EulerOS 2.0 SP12 : expat (EulerOS-SA-2026-3258)

According to the versions of the expat packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libexpat before 2.8.2 lacks handler call depth tracking for calls to XMLResumeParser from within handlers in cases of a policy violation. Thus, a...

KB5123099: Windows 10 Version 1607 / Windows Server 2016 Security Update (September 2026)

The remote Windows host is missing security update 5123099. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

EulerOS 2.0 SP12 : openssl (EulerOS-SA-2026-3363)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer...

KB5123065: Windows Server 2012 Security Update (September 2026)

The remote Windows host is missing security update 5123065. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

PT-2026-88302

Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-87345

CVE-2026-69298 scores 7.8. Integer overflow in Windows Biometric Service lets authorized local attackers gain SYSTEM privileges. Exploitation unlikely; no public disclosure or in-the-wild use yet. Patch now for Windows 10 1607 and others. https://t.co/Vsem3XKkvS https://t.co/Pahr2IXjiN...

PT-2026-88486

Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Adobe Photoshop 26.x < 26.11.7 / 27.x < 27.7 Multiple Vulnerabilities (macOS APSB26-130)

The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 26.11.7/27.7. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb26-130 advisory. - Integer Overflow or Wraparound CWE-190 potentially leading to Arbitrary code execution...

KB5122880: Windows 11 version 23H2 Security Update (September 2026)

The remote Windows host is missing security update 5122880. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

KB5124008: Windows 11 Version 24H2 / 25H2 / 26H2 Security Update (September 2026)

The remote Windows host is missing security update 5124008. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

EulerOS 2.0 SP12 : spice-vdagent (EulerOS-SA-2026-3387)

According to the versions of the spice-vdagent packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write arbitrary files ...

Security update for libvirt (important)

openSUSE security update: security update for libvirt ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21738-1 Rating: important References: bsc1274576 bsc1274946 bsc1275264 bsc1275265 bsc1275863 Cross-References: CVE-2026-18917 CVE-2026-61477...

CVE-2008-0600

creationtimestamp| type| source ---|---|--- 2026-09-07 22:00:05+00:00| seen| Telegram/rgUS2xfP1LazmiWNfolsR27C0veXqG1jSYUwYlaoY9G7E0 2026-09-08 00:00:09+00:00| published-proof-of-concept| Telegram/rgUS2xfP1LazmiWNfolsR27C0veXqG1jSYUwYlaoY9G7E0 2026-09-09 05:00:06+00:00| seen|...

Security update for lcms2

This update for lcms2 fixes the following issue: CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize bsc1264994. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...