CVE-2026-108455: Out-of-bounds Read

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

CVE-2026-108438: Use After Free

Use after free in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

CVE-2026-101303: Incorrectly Specified Destination in a Communication Channel

The IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address. A process in a classic non-VNET jail can send UDP datagrams to services listening on the host's IPv6 loopback address, bypassing jail networ...

PT-2026-115274

Name of the Vulnerable Software and Affected Versions BMC Helix Network Management on-prem versions prior to 26.3.01 Description An authentication bypass exists when SAML single sign-on is configured. This allows unauthenticated attackers to log in as the local administrator by submitting the...

PT-2026-115247

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A stack-based buffer overflow occurs in Microsoft Office Word, which could allow an unauthorized attacker to execute arbitrary code over a network. A stack-based buffer overflow...

CVE-2026-99999

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

PT-2026-115258

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description An issue exists where resources are allocated without limits or throttling, which allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the...

CVE-2026-108435: Untrusted Pointer Dereference

Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

PT-2026-115238

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An out-of-bounds read exists in Microsoft Office Word, which allows an unauthorized attacker to disclose information over a network. An out-of-bounds read occurs when the softwa...

PT-2026-115240

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A use after free issue exists in Microsoft Office Word. This occurs when an application continues to use a pointer after it has been freed, which can be leveraged by an...

PT-2026-115248

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A use after free issue exists in Microsoft Office Excel. This flaw allows an unauthorized attacker to execute arbitrary code over a network. Use after free is a memory corrupti...

PT-2026-115236

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An out-of-bounds read exists in Microsoft Office Word, which allows an unauthorized attacker to disclose information over a network. An out-of-bounds read occurs when the softwa...

PT-2026-115257

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose information over a network. An out-of-bounds read occurs when the software reads data past the end of the...

UBUNTU-CVE-2026-88833

A flaw was found in BusyBox's udhcpc DHCP client. When processing raw DHCP packets, the client replaces the validated packet length with an attacker-controlled value from the IP header without re-validating the minimum size. This leads to an integer underflow when subtracting header sizes, causin...

CVE-2026-108454: Buffer Over-read

Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

CVE-2026-108443: Off-by-one Error

Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108442: Use After Free

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

Linux Distros Unpatched Vulnerability : CVE-2026-99999

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network...

RHEL 8 / 9 : Red Hat Service Interconnect 2.2.3 Release (rpms) (Moderate) (RHSA-2026:82316)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:82316 advisory. Red Hat Service Interconnect 2.2 creates a service network, linking TCP and HTTP services across the hybrid cloud. A service network enables...

OpenJDK 7 <= 7u291 / 8 <= 8u282 / 11.0.0 <= 11.0.10 / 13.0.0 <= 13.0.6 / 15.0.0 <= 15.0.2 / 16.0.0 <= 16.0.0 Multiple Vulnerabilities (2021-04-20)

The version of OpenJDK installed on the remote host is 7 prior to 7u291 / 8 prior to 8u282 / 11.0.0 prior to 11.0.10 / 13.0.0 prior to 13.0.6 / 15.0.0 prior to 15.0.2 / 16.0.0 prior to 16.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the 2021-04-20 advisory. Please...