Kaspersky Security Center DoS

The vulnerability in the Agent Administration module and the Server Administration module of Kaspersky Security Center, Kaspersky Security Center Cloud Console, and Kaspersky Endpoint Security Cloud is related to a lack of authentication for a critical function. Exploitation of this vulnerability...

OWN-Defender

OWN-Defender — Windows Security Center COM Research OWN-Defender is a Windows security research project focused on understanding how Windows Security Center WSC represents and manages antivirus security products through its COM interfaces. The project began as an investigation into the behavior...

CVE-2026-88941

Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild...

CVE-2026-88941

Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild...

EUVD-2026-112680

Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild...

CVE-2026-88941

Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center. The vulnerability could potentially cause the Network Agent module of Kaspersky Security Center to malfunction. There are no evidence of the vulnerability exploitation in-the-wild...

CVE-2026-88941

Kaspersky addressed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center . The flaw, categorized under CWE-306 (Missing Authentication for Critical Function) , could potentially cause the Network Agent module to malfunction . No evidence of in-the-wild exploitation...

Tenable Security Center Multiple Vulnerabilities (TNS-2026-30)

According to its self-reported version, the Tenable Security Center running on the remote host is 6.9.1 or earlier and missing security patch SC-202610.2. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-30 advisory. - PHP uses longjmp for out-of-memory OOM...

[R1] Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2, 6.8.0, 6.9.1: SC-202610.2

R1 Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2, 6.8.0, 6.9.1: SC-202610.2 Arnie Cabral Fri, 10/23/2026 - 15:52 Security Center leverages third-party software to help provide underlying functionality. One of the third-party components php was found to...

Tenable Security Center Multiple Vulnerabilities (TNS-2026-28)

According to its self-reported version, the Tenable Security Center running on the remote host is 6.9.1 or earlier and missing security patch SC-202610.1. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-28 advisory. - PHP uses longjmp for out-of-memory OOM...

[R2] Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2, 6.8.0, 6.9.1: SC-202610.1

R2 Stand-alone Security Patch Available for Tenable Security Center Versions 6.6.0, 6.7.2, 6.8.0, 6.9.1: SC-202610.1 Arnie Cabral Thu, 10/22/2026 - 10:06 Please see https://www.tenable.com/security/tns-2026-30 for updated information and remediation guidance...

Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities

Summary IBM Guardium Data Security Center has addressed these vulnerabilties in an update. Vulnerability Details CVEID:CVE-2026-78662 DESCRIPTION: Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's...

CVE-2026-71347

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Security Center allows an authorized attacker to elevate privileges locally...

CVE-2026-70212

Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally...

EUVD-2026-100339

Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally...

CVE-2026-70212

The Windows Security Center is affected by a vulnerability involving the improper restriction of communication channels to intended endpoints. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-923 . While the impact is high ...

EUVD-2026-99573

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Security Center allows an authorized attacker to elevate privileges locally...

CVE-2026-71347

A race condition (improper synchronization during concurrent execution) exists in Windows Security Center , which allows an authorized attacker to achieve local elevation of privilege . Technical details regarding specific components or root causes are not provided in the documents, and no exploi...

Windows Security Center Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Security Center allows an authorized attacker to elevate privileges locally...

Windows Security Center Elevation of Privilege Vulnerability

Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally...