Security Updates for Microsoft Office Products (August 2026)

The Microsoft Office Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-63513, CVE-2026-63533, CVE-2026-65661 - Integer overflow or...

PT-2026-70803

Name of the Vulnerable Software and Affected Versions Lightroom Classic affected versions not specified Description An Integer Overflow or Wraparound issue exists, which could allow arbitrary code execution within the context of the current user. This occurs when a user opens a specially crafted...

(Pwn2Own) Microsoft Windows http.sys Integer Overflow Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the http.sys drive...

PT-2026-70639

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An integer overflow or wraparound occurs in Microsoft Office, which could allow an unauthorized attacker to execute code locally. An integer overflow happens when an arithmetic...

PT-2026-70383

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An Integer Overflow or Wraparound issue exists, which occurs when an arithmetic operation attempts to create a numeric value that is outside of the range that can be represent...

CVE-2026-71331: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Device Health Attestation DHA allows an unauthorized attacker to execute code over a network...

CVE-2026-62822: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network...

CVE-2026-70329: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

CVE-2026-61937: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

PT-2026-70784

Name of the Vulnerable Software and Affected Versions anoid versions prior to 3.3.12 anoid versions prior to 5.1.11 Description The nanoidsize function in index.js and index.cjs coerces the user-influenced size parameter to a signed 32-bit integer. Providing a value of 2147483648 causes it to...

Fedora 43 : p11-kit (2026-e281fdcb69)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e281fdcb69 advisory. rpc: guard against overflow when decoding nested attributes CVE-2026-18938 Only affects 32 bit systems Tenable has extracted the preceding description block...

PT-2026-70511

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description An integer overflow or wraparound occurs in the Windows Projected File System, which allows an authorized attacker to elevate privileges locally. Recommendations At the...

PT-2026-70382

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An Integer Overflow or Wraparound issue exists, which occurs when an arithmetic operation attempts to create a numeric value that is outside of the range that can be represent...

CVE-2026-15562: Integer Overflow or Wraparound

A flaw was found in EAP's jboss-remoting. A remote unauthenticated attacker who can reach :8080 or :9990, or :4447 and complete an Upgrade: jboss-remoting handshake can cause OOM errors that degrade requests server-wide, leading to denial of service...

PT-2026-70373

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An Integer Overflow or Wraparound issue exists, which occurs when an arithmetic operation attempts to create a numeric value that is outside of the range that can be represent...

CVE-2026-63532: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally...

PT-2026-70780

Name of the Vulnerable Software and Affected Versions Microsoft Azure Attestation service affected versions not specified Device Health Attestation Service affected versions not specified Description An integer overflow or wraparound occurs in the Microsoft Azure Attestation service and Device...

DEBIAN-CVE-2026-6426

A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size is stored as a uint64t but read by the VMSVBUFFER load path as a signed int32t. On little-endian hosts, a crafted incoming migration state with bit 31 set causes the value to b...

CVE-2026-6426

A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size is stored as a uint64t but read by the VMSVBUFFER load path as a signed int32t. On little-endian hosts, a crafted incoming migration state with bit 31 set causes the value to b...

UBUNTU-CVE-2026-6426

A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size is stored as a uint64t but read by the VMSVBUFFER load path as a signed int32t. On little-endian hosts, a crafted incoming migration state with bit 31 set causes the value to b...