PT-2026-70520

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A stack-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow is a condition where a...

PT-2026-70899

Name of the Vulnerable Software and Affected Versions GMS application versions prior to 9.5.1 Build 9510.1044 Description Insecure handling of serialized objects in a service allows a local attacker to perform unauthorized actions through the affected component. Serialization is the process of...

PT-2026-70740

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

RockyLinux 8 : kernel (RLSA-2026:52765)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:52765 advisory. kernel: iio: event: Fix event FIFO reset race CVE-2026-64496 Tenable has extracted the preceding description block directly from the RockyLinux security advisory...

PT-2026-70790

A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary code execution...

Security Update for Microsoft PowerPoint Products (August 2026)

The Microsoft PowerPoint Products are missing a security update. They are, therefore, affected by an information disclosure vulnerability. Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. Note that Nessus has not tested for this...

PT-2026-70525

Name of the Vulnerable Software and Affected Versions Windows Kerberos affected versions not specified Description A use-after-free condition in Windows Kerberos allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an applicatio...

PT-2026-70778

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An out-of-bounds write allows an unauthorized attacker to execute arbitrary code locally and remotely, potentially affecting the entire system. An out-of-bounds write occurs when a program write...

HPESBHF05069 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01419, 2026.2 IPU, Intel Trust Domain Extensions (Intel TDX) module Advisory

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to 2.09 HFP 2026.05.00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-31356 |...

PT-2026-70406

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description A race condition exists in the Windows Event Logging Service. This occurs when concurrent execution using a shared resource lacks proper synchronization, allowing an...

PT-2026-70470

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description A use-after-free condition in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

PT-2026-70523

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Cloud Files Mini Filter Driver. This issue allows an authorized attacker to elevate privileges locally on the...

PT-2026-70540

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use-after-free condition in the Windows Kernel allows an authorized attacker to elevate privileges locally, enabling them to affect the system. Use-after-free is a memory corruption...

PT-2026-70466

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A use-after-free condition in the Windows Telephony Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

PT-2026-70751

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally...

PT-2026-70452

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description A use-after-free condition in the Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

PT-2026-70614

Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...

PT-2026-70698

Name of the Vulnerable Software and Affected Versions Windows Storage Port Driver affected versions not specified Description A heap-based buffer overflow exists in the Windows Storage Port Driver. This issue occurs due to an integer overflow, which allows an authorized attacker to elevate...

PT-2026-70442

Name of the Vulnerable Software and Affected Versions Windows Display Enhancement Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Display Enhancement Service. This issue allows an authorized attacker to elevate privileges locally on the syste...

PT-2026-70434

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations A...