474207 matches found
PT-2026-112592
Name of the Vulnerable Software and Affected Versions Windows Update Stack affected versions not specified Description Improper verification of cryptographic signatures allows an authorized attacker to perform local spoofing, which can affect the system. Recommendations At the moment, there is no...
CVE-2026-70056: Use After Free
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-100200: Use After Free
Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-100203: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-96218: External Control of System or Configuration Setting
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally...
CVE-2026-69673: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Update allows an authorized attacker to elevate privileges locally...
CVE-2026-110121: Authorization Bypass Through User-Controlled Key
PickMall lilishop through 4.4 contains an insecure direct object reference vulnerability that allows authenticated sellers to overwrite any store's product by supplying another store's goodsId to the goods update endpoint. Attackers can send PUT requests to /store/goods/goods/update/goodsId to...
PT-2026-111976
Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description Incorrect default permissions in the service allow an authorized attacker to elevate privileges locally, which enables them to affect the system. Recommendations At the...
CVE-2026-97812: Double Free
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...
CVE-2026-83798: Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally...
PT-2026-113505
Name of the Vulnerable Software and Affected Versions Legacy Update versions 1.12.0 through 1.13.1 Description An origin validation error exists in the IsPermitted method of the ActiveX control. When the hosting document's hostname is not on the permitted list, the system fails to set E...
PT-2026-111879
Name of the Vulnerable Software and Affected Versions Windows Update Service affected versions not specified Description A use-after-free condition in the Windows Update Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs wh...
PT-2026-111882
Name of the Vulnerable Software and Affected Versions Windows Update Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Update Service, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...
CVE-2026-108465: Use After Free
Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally...
CVE-2026-69633: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally...
python-tornado security update
6.5.10-1.1 - Update to 6.5.10 Resolves: RHEL-274870...
PT-2026-111425
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description Privilege escalation exists within the Application Update component. Recommendations Update...
CLSA-2026-1791843328 TuxCare security update for path-to-regexp (2 CVEs)
TuxCare rebuilt path-to-regexp to address 2 CVEs. Fixed in 0.1.7-tuxcare.1...