PT-2026-70641

Name of the Vulnerable Software and Affected Versions Microsoft Office Access affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70738

Name of the Vulnerable Software and Affected Versions Windows Package Manager affected versions not specified Description Improper privilege management allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that...

Exploit for CVE-2021-47881

CVE-2021-47881 Local stack-based buffer overflow in dataSIM...

CVE-2026-15059

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation...

CVE-2026-21071

Improper input validation in the MPEG4 codec within libsavsvc.so allows local attackers to write out-of-bounds memory on Samsung devices prior to the SMR Aug-2026 Release 1 update. NVD rates it HIGH (CVSS 7.8) requiring low privileges; Samsung rates it MEDIUM (CVSS 5.1). No exploitation details a...

CVE-2026-19381

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLibKSFX.sys of the component Driver. Performing a manipulation results in improper privilege management. The attack needs to be approached locall...

CVE-2026-19382

A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attack can only be executed locally. The exploit has been made available to the...

CVE-2026-19382

CVE-2026-19382 affects Almico Speedfan 4.52, specifically the KiSystemCall64 function in the speedfan.sys MSR Index Handler. The weakness can cause a memory leak when a manipulation is executed locally. The exploit is publicly available, and the vendor has not responded to disclosure. The connect...

CVE-2026-19382 Almico Speedfan MSR Index speedfan.sys KiSystemCall64 memory leak

A weakness has been identified in Almico Speedfan 4.52. This affects the function KiSystemCall64 in the library speedfan.sys of the component MSR Index Handler. Executing a manipulation can lead to memory leak. The attack can only be executed locally. The exploit has been made available to the...

CVE-2026-19381 Kingston FURY CTRL RGB Control Software Driver NTIOLib_KSFX.sys privileges management

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLibKSFX.sys of the component Driver. Performing a manipulation results in improper privilege management. The attack needs to be approached locall...

CVE-2026-19381

Kingston FURY CTRL RGB Control Software 2.0.65.0 is affected by a privilege management flaw in NTIOLib_KSFX.sys (Driver component). The vulnerability allows a local attacker to misuse an unknown function in the driver, with impact to confidentiality, integrity, and availability described as high....

EUVD-2026-54976

A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0. The impacted element is an unknown function in the library NTIOLibKSFX.sys of the component Driver. Performing a manipulation results in improper privilege management. The attack needs to be approached locall...

Photon OS 5.0: Imagemagick PHSA-2025-5.0-91-0714

An update of the ImageMagick package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0714. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

MiracleLinux 9 : cifs-utils-7.6-2.el9_8 (AXSA:2026-1506:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1506:05 advisory. cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall CVE-2026-12505 Tenable has extracted the preceding description...

Photon OS 5.0: Linux PHSA-2025-5.0-91-0598

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0598. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Gnuplot PHSA-2025-5.0-92-0522

An update of the gnuplot package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-92-0522. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2026-5.0-92-0890

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-0890. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Linux PHSA-2025-5.0-91-0695

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0695. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libxml2 PHSA-2023-5.0-91-0008

An update of the libxml2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0008. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Grub2 PHSA-2025-5.0-91-0477

An update of the grub2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0477. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...