CVE-2026-69860: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

CVE-2026-69744: NULL Pointer Dereference

Null pointer dereference in Windows Kerberos allows an unauthorized attacker to deny service over a network...

CVE-2026-69819: Out-of-bounds Write

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network...

CVE-2026-69681: Heap-based Buffer Overflow

Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-69757: Use After Free

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...

CVE-2026-69875: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-69717: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...

CVE-2026-69628: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network...

PT-2026-87798

Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62813: Use After Free

Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network...

Linux Distros Unpatched Vulnerability : CVE-2026-78124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 5.0.2 through 6.0.7 allows PKCS7 certificate enumeration in the openssl plugin that leads to a lack of release of memory after its effective lifetime...

Linux Distros Unpatched Vulnerability : CVE-2026-78132

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 5.1.3 through 6.0.7 has an infinite loop in the x509 plugin's attribute certificate parser for ietfAttrSyntax. CVE-2026-78132 Note that Nessus relies...

Unity Linux 20.1070e Security Update: mysql (UTSA-2026-022342)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-022342 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0...

CVE-2026-83711

Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-80098

Improper verification of cryptographic signature in Copilot Studio allows an unauthorized attacker to elevate privileges over a network...

PT-2026-85311

Name of the Vulnerable Software and Affected Versions Microsoft Fabric affected versions not specified Description Microsoft Fabric contains a flaw where missing authorization allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no informatio...

CVE-2026-62916: Authentication Bypass Using an Alternate Path or Channel

Authentication bypass using an alternate path or channel in Microsoft Entra ID allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-70352: Missing Authentication for Critical Function

Missing authentication for critical function in Azure AI Language allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-65818: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Power Automate allows an authorized attacker to elevate privileges over a network...

CVE-2026-69857: Authorization Bypass Through User-Controlled Key

Authorization bypass through user-controlled key in Azure Cosmos DB allows an authorized attacker to perform spoofing over a network...