PT-2026-70436

Name of the Vulnerable Software and Affected Versions Windows Network Connection Broker affected versions not specified Description A double free issue in the Windows Network Connection Broker allows an authorized attacker to elevate privileges locally. A double free occurs when the system attemp...

PT-2026-70527

Name of the Vulnerable Software and Affected Versions Windows Container Isolation FS Filter Driver unionfs.sys affected versions not specified Description Incorrect authorization in the unionfs.sys driver allows an authorized attacker to disclose sensitive information locally and affect the syste...

PT-2026-70461

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

PT-2026-70513

Name of the Vulnerable Software and Affected Versions Windows HTTP.sys affected versions not specified Description A heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

PT-2026-70482

Name of the Vulnerable Software and Affected Versions Windows Message Queuing affected versions not specified Description A heap-based buffer overflow occurs in Windows Message Queuing, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

PT-2026-70425

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Telephony Service, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a...

PT-2026-70673

Name of the Vulnerable Software and Affected Versions Windows Autopilot affected versions not specified Description A use-after-free condition in Windows Autopilot enables an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...

KB5120418: Windows 10 Version 1607 / Windows Server 2016 Security Update (August 2026)

The remote Windows host is missing security update 5120418. It is, therefore, affected by multiple vulnerabilities - Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. CVE-2026-62878 - Use after free in Windows Deployment Services allows an...

PT-2026-70738

Name of the Vulnerable Software and Affected Versions Windows Package Manager affected versions not specified Description Improper privilege management allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that...

PT-2026-70575

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A stack-based buffer overflow occurs wh...

PT-2026-70508

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A race condition occurs in the Windows Telephony Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileg...

PT-2026-70318

Time-of-check time-of-use race condition for the IntelR NPU Driver for Windows for all versions within Ring 1: Device Drivers may allow a denial of service. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable denial of service. This result...

KB5121003: Windows 11 Version 24H2 / Windows 11 Version 25H2 Security Update (August 2026)

The remote Windows host is missing security update 5121003 or hotpatch 5120994. It is, therefore, affected by multiple vulnerabilities - Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. CVE-2026-62815 - Improper neutralization of special elements us...

PT-2026-70475

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally. This issue is related to improper object management within the UMPDDrvBitBlt...

PT-2026-70420

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description A buffer over-read in the Windows Event Logging Service allows an authorized attacker to disclose information locally. A buffer over-read occurs when a program reads mor...

PT-2026-70677

Name of the Vulnerable Software and Affected Versions Windows Autopilot affected versions not specified Description A use-after-free condition in Windows Autopilot allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...

KB5120233: Windows Server 2025 Security Update (August 2026)

The remote Windows host is missing security update 5120233 or hotpatch 5120228. It is, therefore, affected by multiple vulnerabilities - Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. CVE-2026-62815 - Stack-based buffer overflow in Windows DNS...

PT-2026-70767

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A heap-based buffer overflow occurs in Windows DNS, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that happe...

CVE-2026-72903

Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.235, a malicious SFTP server can return a backslash traversal filename through entry.name. In tabby-ssh/src/session/sftp.ts, SFTPSession.readdir and makeFile use POSIX path processing that preserves the backslashes a...

CVE-2026-72903

Tabby (formerly Terminus) has a Windows path traversal issue tracked as CVE-2026-72903. In affected builds prior to 1.0.235, the SFTP flow preserves backslashes and relative traversal when handling filenames returned by a malicious SFTP server. Specifically, SFTPSession.readdir() and _makeFile() ...