PT-2026-70297

Incorrect comparison for some IntelR TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentiall...

PT-2026-70493

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A heap-based buffer overflow in the Windows Telephony Service allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program...

PT-2026-70053

Name of the Vulnerable Software and Affected Versions ASUS GPU Tweak III affected versions not specified ASUS GPU Tweak II affected versions not specified ASUS AI Suite 3 affected versions not specified VGAdll affected versions not specified Description An untrusted pointer dereference exists...

PT-2026-70773

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A stack-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow is a condition where a...

PT-2026-70824

Name of the Vulnerable Software and Affected Versions Adobe Commerce affected versions not specified Magento Open Source affected versions not specified Description An incorrect authorization issue allows unauthenticated remote attackers to bypass authentication controls and hijack customer...

Vitis™ Vulnerabilities

CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-43606| Observable Timing Discrepancy in the Vitis™ Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagneti...

ALSA-2026:53330 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: fsnotify: Fix ordering of iput and watchedobjects decrement CVE-2024-53143 kernel: shmem: fix recovery on rename failures CVE-2025-71072 kernel: futex: Fix UaF between futexkeytonodeopt a...

VulnCheck KEV: CVE-2026-68820

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

PT-2026-70596

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An uncaught exception in .NET allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that contains a fix for th...

PT-2026-70885

In sshd in OpenSSH before 10.5, the restrict keyword in authorized keys was supposed to be applicable to tunnel forwarding but was not...

Security Update for Microsoft .NET Core SDK (August 2026)

The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by a vulnerability as referenced in the vendor advisory. - .NET Elevation of Privilege Vulnerability CVE-2026-58641, CVE-2026-62871, CVE-2026-62886, CVE-2026-62909 - .NET Securit...

PT-2026-70498

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An untrusted pointer dereference in the Windows Kernel allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the...

PT-2026-70484

Name of the Vulnerable Software and Affected Versions User-Mode Power Service UMPS affected versions not specified Description Insufficient granularity of access control in the User-Mode Power Service UMPS allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

HPESBHF05096 rev.1 - HPE ProLiant DL/ML/XD, Alletra and Synergy Server Using Certain Intel Processors, INTEL-SA-01379, Intel Xeon 6 Processor Firmware Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage Server 4210 - Prior to v1.8005-29-2026 HPE ProLiant Compute DL110 Gen12 - Prior to 1.5007-24-2026 HPE ProLiant Compute DL320 Gen12 - Prior to v1.8005-29-20...

HPESBHF05117 rev.1 - HPE ProLiant DL/ML/XD, Alletra, and Synergy Server Using Certain Intel Processors, INTEL-SA-01442, Intel Xeon Processor Firmware Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra Storage Server 4210 - Prior to v1.8005-29-2026 HPE ProLiant Compute DL110 Gen12 - Prior to v1.5007-24-2026 HPE ProLiant Compute DL320 Gen12 - Prior to...

Security update for go-sendxmpp (important)

openSUSE Security Update: Security update for go-sendxmpp Announcement ID: openSUSE-SU-2026:0280-1 Rating: important References: 1266617 Cross-References: CVE-2026-39821 CVSS scores: CVE-2026-39821 SUSE: 9.1 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N Affected Products: openSU...

Intel® Xeon® 6 Processor Firmware Advisory

Summary: A potential security vulnerability for some Intel® Xeon® 6 processor with Intel® Trust Domain Extensions Intel® TDX may allow escalation of privilege. Intel is releasing microcode updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-31936 Description:...

Gaudi Container Runtime Software Advisory

Summary: A potential security vulnerability for some Gaudi Container Runtime software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-32677 Description: Path traversal for some...

KLA91207 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user...

Intel® Extension for TensorFlow Software Advisory

Summary: A potential security vulnerability in some Intel® Extension for TensorFlow software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20728 Description: Protection mechanism failure for...