PT-2026-111494

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Thunderbird versions prior to 158 Description An invalid pointer in the DOM Notifications component leads to undefined behavior. Recommendations Update Firefox to version 158. Update Thunderbird to version 158...

CVE-2026-83889: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network...

CVE-2026-109774: Undefined Security Weakness

Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-83735: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-85850: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-85362: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

PT-2026-112742

Name of the Vulnerable Software and Affected Versions Windows Management Instrumentation affected versions not specified Description An authorized attacker can elevate privileges locally due to the release of an invalid pointer or reference within the Windows Management Instrumentation component...

CVE-2026-108133: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85850: Windows Kernel Elevation of Privilege Vulnerability

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83889: Windows DNS Server Remote Code Execution Vulnerability

Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83735: Windows Kernel Elevation of Privilege Vulnerability

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-112652

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An authorized attacker can execute arbitrary code over a network due to the release of an invalid pointer or reference. This issue allows remote attackers to affect the system...

PT-2026-112012

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description An issue exists where the release of an invalid pointer or reference allows an authorized attacker to elevate privileges locally. This elevation-of-privilege allo...

firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to invalid pointer in the Graphics component...

firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to invalid pointer in the Graphics component...

firefox: thunderbird: Sandbox escape due to invalid pointer in the Graphics component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to invalid pointer in the Graphics component...

firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Invalid pointer in the JavaScript: WebAssembly component...

firefox: thunderbird: Invalid pointer in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Invalid pointer in the JavaScript: WebAssembly component...

firefox: Privilege escalation due to invalid pointer in the Graphics component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation due to invalid pointer in the Graphics component...

Security Bulletin: UPDATED security alert for multiple OpenSSL vulnerabilities impacting AIX. Updated On: Fri Oct 9 03:18:49 CDT 2026. Reason: Updated the iFix to include the previously missing OpenSSL 1.1 and 1.0.2 shared libraries.

Summary Vulnerabilities in OpenSSL could cause excessive memory consumption CVE-2026-54874, heap buffer overflow CVE-2026-63072, indefinite cache growth leading to denial of service CVE-2026-63074, invalid pointer dereference CVE-2026-63076, and authentication forgery CVE-2026-75803. OpenSSL is...