EulerOS 2.0 SP13 : gnutls (EulerOS-SA-2026-1275)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the GnuTLS library, specifically in the gnutlspkcs11tokeninit function that handles PKCS11 token initialization. When a token...

KB5078883: Windows 11 version 23H2 Security Update (March 2026)

The remote Windows host is missing security update 5078883. It is, therefore, affected by multiple vulnerabilities - Use after free in Broadcast DVR allows an authorized attacker to elevate privileges locally. CVE-2026-23667 - Use after free in Windows Print Spooler Components allows an authorize...

Zoom Workplace VDI Client 6.6 < 6.6.11 Vulnerability (ZSB-26002)

The version of Zoom Workplace VDI Client installed on the remote host is between 6.6 and 6.6.11. It is, therefore, affected by a vulnerability as referenced in the ZSB-26002 advisory. - Improper Check of minimum version in update functionality of certain Zoom Clients for Windows may allow an...

PT-2026-24452

In EfwApTransport::ProcessRxRing of efw ap transport.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-24272

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A race condition exists in the Microsoft Graphics Component due to improper synchronization when handling concurrent execution with shared resources. This allows a local attacker to...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from a race condition in the vpuopeninst function in vpuioctl.c. This race condition leads to the reuse of resources after release, potentially allowing for local privilege escalati...

PT-2026-24447

Name of the Vulnerable Software and Affected Versions oobconfig affected versions not specified Description A logic error in oobconfig may allow a bypass of carrier restrictions. Successful exploitation could lead to local escalation of privilege without requiring additional execution privileges ...

PT-2026-24333

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description A flaw in .NET allows an authorized attacker to gain elevated privileges on a local system. The March 2026 Patch Tuesday addressed this issue, fixing 79 flaws including two zero-day...

PT-2026-24280

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A use-after-free condition exists in the Windows Win32K component. This allows a locally authorized attacker to gain elevated privileges. Recommendations At the moment, there is no...

PT-2026-24311

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A flaw exists in the Winlogon login program of Windows operating systems related to incorrect handling of symbolic links during file access. Exploitation of this issue could allow an...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability. This vulnerability stems from the lack of boundary checks in the DeviceId function within DeviceId.java, which results in persistent data synchronization issues. This may lead to an increase in...

Microsoft Windows win32full Improper Release Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

Fortinet FortiClient Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Fortinet FortiClient. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

PT-2026-24294

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

PT-2026-24335

Уязвимость пакета программ Microsoft Office связана с целочисленным переполнением. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

PT-2026-24283

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A use-after-free condition exists in the Windows Kernel. Successful exploitation could allow an attacker to gain elevated privileges on a local system. Recommendations At the moment...

Ivanti Desktop and Server Management 安全漏洞

Ivanti Desktop and Server Management Ivanti DSM is a multi-platform unified endpoint management solution provided by the American company Ivanti. Versions of Ivanti Desktop and Server Management prior to 2026.1.1 contained security vulnerabilities. These vulnerabilities were due to exposed...

📄 VirtualBox 7.0.16 Local Privilege Escalation / Race Condition

VirtualBox version 7.0.16 proof of concept local privilege escalation exploit that leverages a race condition vulnerability. ============================================================================================================================================= | Title : VirtualBox 7.0.16...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from the lack of boundary checks in the EfwApTransport::ProcessRxRing function, leading to out-of-bound writing and potentially allowing for local privilege escalation...

Microsoft Windows win32full Improper Release Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...