Intel® Extension for TensorFlow Software Advisory

Summary: A potential security vulnerability in some Intel® Extension for TensorFlow software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-20728 Description: Protection mechanism failure for...

Intel® Performance Counter Monitor (Intel® PCM) Software Advisory

Summary: A potential security vulnerability for some Intel® Performance Counter Monitor Intel® PCM Software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-32791 Description: Untrusted search...

RockyLinux 8 : kernel-rt (RLSA-2026:52761)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:52761 advisory. kernel: iio: event: Fix event FIFO reset race CVE-2026-64496 Tenable has extracted the preceding description block directly from the RockyLinux security advisory...

Linux Distros Unpatched Vulnerability : CVE-2026-68419

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/irdma: Prevent reregmr for non-mem regions When a QP/CQ/SRQ is created, a two step process is used where the buffer is allocated in userspace and explicitl...

Important: iscsi-initiator-utils security, bug fix, and enhancement update

The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface iSCSI protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol IP networks...

PT-2026-70200

Craft CMS versions = 5.0.0-RC1 before 5.10.6 and = 4.0.0-RC1 before 4.18.2 interpolate environment variables and secrets via $ENV VAR strings in the elementId parameter into Twig templates before rendering, even when the Twig sandbox is enabled. An authenticated attacker with control panel access...

PT-2026-70763

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Server-side request forgery SSRF allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where a server is tricked into making requests to an...

PT-2026-70041

Name of the Vulnerable Software and Affected Versions SAP S/4HANA affected versions not specified Description The Reprocess Bank Statement Items feature fails to perform required authorization checks for authenticated users. This allows users to utilize rules that were not shared with them, leadi...

PT-2026-70251

Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .VimballRecord to overwrite the installation record with attacker-chosen commands. When vimballRmVimball later processes the matching record entry, the stored Ex...

PT-2026-70264

CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via insecure direct object reference IDOR that allows authenticated low-privileged attackers to overwrite any user's credentials by exploiting a parameter confusion flaw between the authorization filter and action...

PT-2026-70368

Name of the Vulnerable Software and Affected Versions Windows RPC API affected versions not specified Description Missing authentication for a critical function in the Windows RPC API allows an authorized attacker to elevate privileges locally. Remote Procedure Call RPC is a protocol that allows ...

PT-2026-70314

Improper authentication for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may...

PT-2026-70438

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose sensitive information locally and affect the system. A heap-based buffer overflow occurs when...

PT-2026-70469

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description A race condition occurs in the Windows Bind Filter Driver due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate...

PT-2026-70473

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Device Association Service. This issue allows an authorized attacker to elevate privileges locally on the system....

PT-2026-70669

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A heap-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issu...

PT-2026-70480

Name of the Vulnerable Software and Affected Versions Windows Message Queuing affected versions not specified Description A heap-based buffer overflow occurs in Windows Message Queuing, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

PT-2026-70361

Name of the Vulnerable Software and Affected Versions Vitis Unified affected versions not specified Description Weak permissions in the installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution...

PT-2026-70573

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description An out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is n...

PT-2026-70287

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description Exposure of sensitive information within Ring 2: Device Drivers may allow an escalation of privilege. An unprivileged software adversary with an...