Microsoft Windows: CVE-2026-84019: Windows Advanced Rasterization Platform Elevation of Privilege Vulnerability

Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83739: Windows Bluetooth Service Remote Code Execution Vulnerability

Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network...

Microsoft Windows: CVE-2026-83857: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69997: Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

PT-2026-112744

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use after free issue exists in Windows Installer. This allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

PT-2026-112722

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A use after free issue in the Windows Device Association Service allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption...

PT-2026-112641

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A use after free condition in Windows Shell allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption issue that occurs when an application...

PT-2026-116214

Уязвимость реализации протокола QUIC операционных систем Windows связана с использованием памяти после ее освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

PT-2026-112218

Name of the Vulnerable Software and Affected Versions Windows Spaceport.sys affected versions not specified Description A use-after-free condition in the Spaceport.sys driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when ...

PT-2026-112600

Name of the Vulnerable Software and Affected Versions Windows Kernel-Mode Drivers affected versions not specified Description A use after free issue exists in Windows Kernel-Mode Drivers. This flaw allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption...

PT-2026-112985

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...

Security Updates for Microsoft Office Online Server (October 2026)

The Microsoft Office Online Server or Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

PT-2026-113238

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A use-after-free condition exists in the Windows Broadcast DVR User Service. This allows an authorized attacker to elevate privileges locally on the system...

KB5127648: Windows 11 Version 24H2 / Windows 11 Version 25H2 / Windows 11 Version 26H2 Security Update (October 2026)

The remote Windows host is missing security update 5127648. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...

CentOS Linux 8.4 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1791904140)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791904140 advisory. - A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage of...

Security Vulnerabilities fixed in Firefox 158 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-109704: Privilege escalation in the Application Update component Reporter Noel Impact hi...

Security Vulnerabilities fixed in Firefox ESR 153.5 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-109704: Privilege escalation in the Application Update component Reporter Noel Impact hi...

Security Vulnerabilities fixed in Firefox ESR 115.43 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-109706: Use-after-free in the Storage: IndexedDB component Reporter Mozilla Impact high...

CVE-2026-83876: Use After Free

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

Microsoft Office: CVE-2026-97747: Microsoft Office Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...