Microsoft Windows: CVE-2026-85939: Windows Kernel Security Feature Bypass Vulnerability

Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network...

Microsoft Windows: CVE-2026-87705: Windows Hyper-V Security Feature Bypass Vulnerability

Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network...

Microsoft Windows: CVE-2026-69640: Windows Key Distribution Center Security Feature Bypass Vulnerability

Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network...

Microsoft Windows: CVE-2026-83766: Windows Hyper-V Security Feature Bypass Vulnerability

Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network...

Microsoft Windows: CVE-2026-70087: Role: DNS Server Security Feature Bypass Vulnerability

Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-85805: Microsoft PowerShell Security Feature Bypass Vulnerability

Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...

Microsoft Windows: CVE-2026-88098: Windows Security Support Provider Interface Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87710: Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Improper access control in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87714: WebDAV Security Feature Bypass Vulnerability

Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network...

PT-2026-111430

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description An issue exists in the Security: Process Sandboxing component that allows for information...

Microsoft Windows: CVE-2026-69979: Windows AppX Deployment Service Security Feature Bypass Vulnerability

Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-108130: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96951: Windows Shell Security Feature Bypass Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...

Microsoft Windows: CVE-2026-88074: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

VulnCheck KEV: CVE-2026-96951

Improper neutralization of special elements used in a command 'command injection' in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...

Microsoft .NET Framework: CVE-2026-108398: .NET Framework Security Feature Bypass Vulnerability

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally...

Ubuntu 26.04 LTS : OpenJDK 26 vulnerabilities (USN-8689-1)

The remote Ubuntu 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8689-1 advisory. It was discovered that the JSSE component of OpenJDK 26 did not correctly authenticate users. A remote attacker could possibly use this issue to read or...

Ubuntu 26.04 LTS : CRaC JDK 25 vulnerabilities (USN-8695-1)

The remote Ubuntu 26.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8695-1 advisory. It was discovered that the JSSE component of CRaC JDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify...

Ubuntu 26.04 LTS : CRaC JDK 17 vulnerabilities (USN-8693-1)

The remote Ubuntu 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8693-1 advisory. It was discovered that the JSSE component of CRaC JDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to read or...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenJDK 25 vulnerabilities (USN-8681-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8681-1 advisory. It was discovered that the JSSE component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly us...