PT-2026-88712

Type confusion in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-88093

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

KB5122876: Windows 10 version 1809 / Windows Server 2019 Security Update (September 2026)

The remote Windows host is missing security update 5122876. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

CVE-2026-69522

This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution...

PT-2026-88504

Impact The Git node validated the repository that a fetch or pull targeted, but setUpstream wrote a branch..remote value into the repository's own configuration without validating it. A subsequent fetch or pull resolved the remote from that configuration rather than from the checked parameter, so...

PT-2026-88537

Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

PT-2026-88639

Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88710

Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88663

Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

PT-2026-88698

Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

PT-2026-87644

🚨Critical - Windows Kernel Heap Buffer Overflow Network RCE CVE-2026-69669 A heap-based buffer overflow in the Windows Kernel network stack allows unauthenticated remote attackers to trigger out-of-bounds writes via crafted network traffic, leading to kernel-mode RCE and full system compromise...

PT-2026-87755

We have just added an important vulnerability affecting Microsoft Windows CVE-2026-69845 https://t.co/ulFX3mqvL1...

PT-2026-87649

🚨 HIGH SEVERITY: CVE-2026-69678 CVSS 8.8 Use-after-free flaw in Microsoft Office PowerPoint enables remote code execution. Attacker requires user interaction. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/CpB18QSCQG...

KB5123065: Windows Server 2012 Security Update (September 2026)

The remote Windows host is missing security update 5123065. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

AlmaLinux 8 : redis:6 (ALSA-2026:64823)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64823 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Arbitrary code execution via TLS pending-data list...

PT-2026-88096

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

PT-2026-87988

🚨 HIGH: CVE-2026-78444 CVSS 8.1 Untrusted pointer dereference in Windows Failover Cluster enables remote code execution over network. No authentication required. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/JlgAg4R9uL...

RHEL 9 : valkey (RHSA-2026:64807)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64807 advisory. Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, se...

Important: redis:6 security update

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, ...

Skullcandy Dime 3 wireless earbuds contain an unauthenticated Bluetooth pairing vulnerability

Overview Skullcandy Dime 3 wireless earbuds, running firmware version 1.0.0.28, accept a new Bluetooth Classic BR/EDR pairing request from an unpaired device without requiring the earbuds to be placed into pairing mode or requiring any physical confirmation or interaction from the owner...