PT-2026-58202

Name of the Vulnerable Software and Affected Versions Microsoft Windows App Store affected versions not specified Description A race condition occurs when multiple processes access a shared resource concurrently without proper synchronization. In the Microsoft Windows App Store, this flaw allows ...

PT-2026-58313

Name of the Vulnerable Software and Affected Versions Windows Operating Systems affected versions not specified Description A race condition occurs when concurrent execution using a shared resource lacks proper synchronization. This issue, combined with a use-after-free condition, allows an...

PT-2026-58910

Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello...

PT-2026-58360

Name of the Vulnerable Software and Affected Versions Windows Key Guard affected versions not specified Description A race condition exists in Windows Key Guard, where concurrent execution using a shared resource with improper synchronization allows an authorized local attacker to elevate...

Moderate: cups security update

The Common UNIX Printing System CUPS provides a portable printing layer for Linux, UNIX, and similar operating systems. Security Fixes: cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach lp code execution over the network CVE-2026-34980 For more details about...

PT-2026-58605

Name of the Vulnerable Software and Affected Versions Windows Server versions 2012 through 2025 Windows 10 affected versions not specified Windows 11 affected versions not specified Description A race condition exists in the Windows Server Network driver. A race condition is a situation where the...

PT-2026-58126

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A race condition exists in Windows Push Notifications, where concurrent execution using a shared resource with improper synchronization allows an authorized attacker to...

PT-2026-58155

Name of the Vulnerable Software and Affected Versions Windows Clipboard Server affected versions not specified Description A race condition occurs in the Windows Clipboard Server due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges...

PT-2026-58419

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description A race condition exists in the Windows Audio Service. This occurs when concurrent execution using a shared resource lacks proper synchronization, allowing an authorized attacker to elevate...

PT-2026-58656

Name of the Vulnerable Software and Affected Versions Windows USB Print Driver affected versions not specified Description A race condition occurs in the Windows USB Print Driver due to improper synchronization when using a shared resource. This allows an authorized attacker with physical access ...

PT-2026-58353

Name of the Vulnerable Software and Affected Versions Windows LUAFV affected versions not specified Description A race condition occurs in Windows LUAFV due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally on the system...

PT-2026-58180

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A race condition exists in the Windows Kernel, occurring when concurrent execution uses a shared resource with improper synchronization. This flaw allows an authorized attacker to...

PT-2026-58477

Name of the Vulnerable Software and Affected Versions Windows Runtime affected versions not specified Description An elevation-of-privilege issue exists due to a race condition, which occurs when concurrent execution using a shared resource lacks proper synchronization. This allows an authorized...

PT-2026-58122

Name of the Vulnerable Software and Affected Versions Windows App Store affected versions not specified Description A race condition occurs when multiple processes access a shared resource concurrently without proper synchronization. In the Windows App Store, this flaw allows an unauthorized...

PT-2026-58205

Name of the Vulnerable Software and Affected Versions Windows Clip Service affected versions not specified Description A race condition occurs in the Windows Clip Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally...

CVE-2026-61505

Rejetto HFS 3.0.0 through 3.2.0 allows path traversal through the lang query parameter, permitting a remote unauthenticated attacker to read certain JSON files outside the shared folders. Exploitation is constrained to files matching a narrow naming and format pattern, limiting practical impact...

CVE-2026-53365

CVE-2026-53365 is a local privilege escalation vulnerability in the Linux kernel's vsock/virtio zerocopy path (net/vmw_vsock/virtio_transport_common.c). When large messages are fragmented into multiple SKBs, the zerocopy uarg is only attached to the last SKB, leaving non-final SKBs with pinned us...

CVE-2026-61505 Rejetto HFS < 3.2.1 Limited File Disclosure via Path Traversal in lang Parameter

Rejetto HFS 3.0.0 through 3.2.0 allows path traversal through the lang query parameter, permitting a remote unauthenticated attacker to read certain JSON files outside the shared folders. Exploitation is constrained to files matching a narrow naming and format pattern, limiting practical impact...

CVE-2026-61505

Vulnerability summary: Rejetto HFS versions 3.0.0–3.2.0 are affected by a path traversal via the lang parameter, allowing a remote, unauthenticated attacker to read certain JSON files outside shared folders. The impact is constrained to files matching a narrow naming/format pattern, with no indic...

CVE-2026-61505

Rejetto HFS 3.0.0 through 3.2.0 allows path traversal through the lang query parameter, permitting a remote unauthenticated attacker to read certain JSON files outside the shared folders. Exploitation is constrained to files matching a narrow naming and format pattern, limiting practical impact...