Linux Distros Unpatched Vulnerability : CVE-2026-62909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncaught exception in .NET allows an authorized attacker to elevate privileges locally. CVE-2026-62909 Note that Nessus relies on the presence of the package as...

GHSA-FX4Q-GJRX-2JW6 Microsoft Security Advisory CVE-2026-62897 – .NET Remote Code Execution Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An integer overflow or...

CVE-2026-32791

Untrusted search path for some IntelR Performance Counter Monitor IntelR PCM before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

EUVD-2026-56760

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

EUVD-2026-56419

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

EUVD-2026-56524

Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...

CVE-2026-20769

Improper conditions check for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via...

Windows USB Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally...

Microsoft Excel Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Microsoft Office Graphics Component Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

Powerpoint Information Disclosure Vulnerability

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

Microsoft Excel Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Microsoft Office Word Remote Code Execution Vulnerability

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally...

Microsoft Brokering File System Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally...

Microsoft Office Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...

Microsoft Access Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally...

Windows DWM Core Library Information Disclosure Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...

Windows Message Queuing Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally...

RockyLinux 8 : kernel (RLSA-2026:52765)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:52765 advisory. kernel: iio: event: Fix event FIFO reset race CVE-2026-64496 Tenable has extracted the preceding description block directly from the RockyLinux security advisory...

Security Update for Microsoft PowerPoint Products (August 2026)

The Microsoft PowerPoint Products are missing a security update. They are, therefore, affected by an information disclosure vulnerability. Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally. Note that Nessus has not tested for this...