Security Updates for Microsoft Word Products (August 2026)

The Microsoft Word Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-63527, CVE-2026-64907 - Use after free in Microsoft Office...

PT-2026-70351

is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized read and write access, causing a limited disruption to availability. Exploitation of this...

PT-2026-70143

Name of the Vulnerable Software and Affected Versions e107 version 2.4.0 Description An SQL injection allows unauthenticated remote attackers to execute arbitrary SQL commands. This occurs because the news item page ID parameter is concatenated directly into a SQL WHERE clause without proper...

Linux Distros Unpatched Vulnerability : CVE-2026-68385

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/checksum: Fix csumpartial without vector facility Currently csumpartial calls csumcopy with copy=false and dst=NULL. On machines without the vector facilit...

CVE-2026-68187

In the Linux kernel, the following vulnerability has been resolved: exec: fix unsigned loop counter wrap in transferargstostack The stop value is derived from bprm-p PAGESHIFT. The index variable is an unsigned long. If bprm-p drops below PAGESIZE and stop becomes zero the loop condition index =...

PT-2026-70305

Out-of-bounds read for the IntelR NPU Driver for all versions within Ring 3: User Applications may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur via local...

PT-2026-70302

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via...

Redis 8.8.1 Heap Out-Of-Bounds Read

A proof of concept exploit for a heap out-of-bounds read vulnerability in Redis version 8.8.1. The vulnerability exists in Redis Cluster bus PING/PONG/MEET hostname extensions, where a hostname payload lacking a required NUL terminator can cause Redis to read beyond the end of the receive buffer...

PT-2026-70380

CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Arbitrary file system read. An attacker could leverage this vulnerability to gain unauthorized read access to files or directories outside th...

PT-2026-70384

CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access...

PT-2026-70545

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An out-of-bounds read in Windows NTFS allows an authorized attacker to disclose sensitive information locally, which can affect the system. Recommendations At the moment, there is no...

PT-2026-70225

Name of the Vulnerable Software and Affected Versions Tesseract versions prior to 5.5.3 Description A heap out-of-bounds read occurs when a crafted .traineddata model is loaded through the TessBaseAPI::Init function. This happens because SquishedDawg::read squished dawg in src/dict/dawg.cpp accep...

PT-2026-70898

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerberos DecryptMessage function fails to bound the peer-controlled GSS Wrap-token EC field before using it with RRC in IOV pointer offsets, allowing a malicious RDP...

PT-2026-70609

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to locally disclose sensitive information, which can affect the system. Recommendations At the moment, there is no information...

PT-2026-70420

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description A buffer over-read in the Windows Event Logging Service allows an authorized attacker to disclose information locally. A buffer over-read occurs when a program reads mor...

PT-2026-70321

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An Improper Input Validation issue allows a low-privileged attacker to achieve privilege escalation, granting unauthorized read and write access. This...

PT-2026-70711

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read exists that allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially affecting the system. Recommendations At the moment...

PT-2026-70720

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read exists in Microsoft Office Excel, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds...

PT-2026-70441

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description An out-of-bounds read exists that allows an unauthorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information about ...

PT-2026-70408

Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description An out-of-bounds read in the Windows Encrypting File System EFS allows an authorized attacker to disclose sensitive information locally. Recommendations At the...