Kibana 9.4.5 Security Update (ESA-2026-82)

Authorization Bypass Through User-Controlled Key in Kibana Agent Builder Leading to Unauthorized Data Modification Kibana Agent Builder A2A JSON-RPC API endpoint derives the identifier of a stored conversation from a user-supplied input, and the ownership check on that identifier does not...

PT-2026-71790

Kibana Agent Builder A2A JSON-RPC API endpoint derives the identifier of a stored conversation from a user-supplied input, and the ownership check on that identifier does not distinguish between a conversation that does not exist and one that exists but belongs to another user. As a result, an...

CVE-2026-62781

Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network...

CVE-2026-42976

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...

CVE-2026-62781

CVE-2026-62781 is a heap-based buffer overflow in the RPC Runtime Library that enables remote code execution over the network. The vulnerability allows an unauthenticated attacker to run code on affected systems via network interaction. Current documents confirm the issue but do not provide produ...

CVE-2026-62781 RPC Runtime Library Remote Code Execution Vulnerability

...

EUVD-2026-56665

Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network...

CVE-2026-62781 RPC Runtime Library Remote Code Execution Vulnerability

...

CVE-2026-42976

This CVE concerns Windows RPC API: missing authentication for a critical function allows an authorized attacker to escalate privileges locally. Affected component: Windows RPC server/remote procedure call surface; root cause: lack of authentication on a sensitive function. Impact described as loc...

EUVD-2026-56604

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...

CVE-2026-42976

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...

CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability

...

CVE-2026-42976 Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability

...

CVE-2026-61345

CVE-2026-61345: A null pointer dereference in the Microsoft Remote Registry Service can allow an authenticated network attacker to cause Denial of Service. CVSSv3.1 base score 6.5 (NETWORK, LOW complexity, LOW privileges, NO user interaction, Availability Impact HIGH). Affected component: Microso...

CVE-2026-54113 Remote Procedure Call Denial of Service Vulnerability

...

CVE-2026-54113

The CVE-2026-54113 entry pertains to resource allocation without limits or throttling in the Windows Kernel accessible over a network, enabling a remote attacker to cause a denial of service. Documents indicate the affected component is the Windows Kernel involved in network-resource handling; ro...

CVE-2026-54113 Remote Procedure Call Denial of Service Vulnerability

...

Remote Procedure Call Denial of Service Vulnerability

Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network...

RPC Runtime Library Remote Code Execution Vulnerability

Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network...

Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally...