Zoom Workplace VDI Client < 6.5.17 Vulnerability (ZSB-26012)

The version of Zoom Workplace VDI Client installed on the remote host is prior to 6.5.17. It is, therefore, affected by a vulnerability as referenced in the ZSB-26012 advisory. - A time-of-check to time-of-use TOCTOU race condition in the installation and uninstallation process of certain Zoom...

UBUNTU-CVE-2026-47300

Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

PT-2026-58628

Name of the Vulnerable Software and Affected Versions Windows VMSwitch affected versions not specified Description A use-after-free condition in Windows VMSwitch allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory corruption issue that occurs when an...

PT-2026-58325

Name of the Vulnerable Software and Affected Versions Windows Operating Systems affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges locally, potentially enabling a full system takeover. Recommendations At the moment, there is no...

PT-2026-58177

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally, potentially granting full control of the system. Recommendations Apply the July 2026...

PT-2026-58512

Name of the Vulnerable Software and Affected Versions Windows Active Directory affected versions not specified Windows MSMQ affected versions not specified Description An integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally...

PT-2026-58334

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Improper authorization in the RPC Runtime allows an authorized attacker to elevate privileges locally. This issue specifically involves the Netlogon RPC, which can be leveraged to escalate a...

PT-2026-58669

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A use-after-free condition in Windows Win32K allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...

PT-2026-58609

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow in the Windows Network File System NFS allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow occurs when a...

PT-2026-58321

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow in the Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network. This issue can be exploited without requiring user...

PT-2026-58351

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use after free condition in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network. Use after free is a memory corruption...

PT-2026-58604

Name of the Vulnerable Software and Affected Versions Windows MIDI Service Module affected versions not specified Description A use-after-free condition in the Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

PT-2026-58137

Name of the Vulnerable Software and Affected Versions Microsoft Surface affected versions not specified Description Insufficient granularity of access control allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version...

PT-2026-58320

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Windows DWM affected versions not specified Description A use-after-free condition in the Windows Kernel and Windows Desktop Window Manager DWM allows an authorized attacker to elevate privileges...

PT-2026-58514

Name of the Vulnerable Software and Affected Versions Active Directory Certificate Services affected versions not specified Description Improper authorization allows an authorized attacker to elevate privileges over a network, enabling them to affect the system. Recommendations At the moment, the...

PT-2026-58815

Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description An incorrect authorization issue allows a remote attacker to escalate privileges without requiring user interaction. This flaw enables unauthorized read and write access to the system...

PT-2026-58143

Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Direct affected versions not specified Description An integer overflow or wraparound occurs in Windows Storage Spaces Direct, which could allow an unauthorized attacker to elevate privileges through a physical attack...

The vulnerability of the NATS messaging system server, related to deficiencies in authentication procedures, allows attackers to bypass existing security mechanisms and increase their privileges.

The vulnerability of the NATS messaging system server is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms and gain increased privileges...

PT-2026-58343

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description An incorrect implementation of the authentication algorithm in the Windows SMB Server allows an authorized attacker to elevate privileges over a network. Recommendations At the...

Security Updates for Microsoft SQL Server (July 2026)

The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over...