PT-2026-112641

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A use after free condition in Windows Shell allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption issue that occurs when an application...

PT-2026-116214

Уязвимость реализации протокола QUIC операционных систем Windows связана с использованием памяти после ее освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

PT-2026-112600

Name of the Vulnerable Software and Affected Versions Windows Kernel-Mode Drivers affected versions not specified Description A use after free issue exists in Windows Kernel-Mode Drivers. This flaw allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption...

PT-2026-112985

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...

Security Updates for Microsoft Office Online Server (October 2026)

The Microsoft Office Online Server or Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

PT-2026-113238

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A use-after-free condition exists in the Windows Broadcast DVR User Service. This allows an authorized attacker to elevate privileges locally on the system...

CentOS Linux 8.4 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1791904140)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791904140 advisory. - A flaw was found in ImageMagick in versions before 7.0.11 and before 6.9.12, where a division by zero in WaveImage of...

Security Vulnerabilities fixed in Firefox 158 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-109704: Privilege escalation in the Application Update component Reporter Noel Impact hi...

Security Vulnerabilities fixed in Firefox ESR 153.5 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-109704: Privilege escalation in the Application Update component Reporter Noel Impact hi...

Security Vulnerabilities fixed in Firefox ESR 115.43 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-109706: Use-after-free in the Storage: IndexedDB component Reporter Mozilla Impact high...

CVE-2026-83876: Use After Free

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69452: Windows Enterprise App Management Elevation of Privilege Vulnerability

Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-70013: Windows iSCSI Remote Code Execution Vulnerability

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70252: Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability

Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83690: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83702: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83859: Windows NTFS Elevation of Privilege Vulnerability

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85841: Windows DHCP Server Remote Code Execution Vulnerability

Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-85930: Windows Image Acquisition Elevation of Privilege Vulnerability

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85945: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...