PT-2026-70534

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description An out-of-bounds read in the Windows SMB Client allows an unauthorized attacker to disclose sensitive information over a network, which can subsequently affect the system. An...

Npcap driver installed without administrator-only access restriction on Windows in Arc before v2.7.0

Summary The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver was accessible to every local user of the host instead of being restricted to administrators only. Impact A local user without administrative privileges could use the...

PT-2026-70411

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description A null pointer dereference in Windows TCP/IP allows an unauthorized attacker to cause a denial of service over a network. A null pointer dereference occurs when a program attempts to...

PT-2026-70393

Name of the Vulnerable Software and Affected Versions Windows Network Address Translation NAT affected versions not specified Description An origin validation error allows an unauthorized attacker to perform spoofing over an adjacent network, which can affect the system. Recommendations At the...

PT-2026-70525

Name of the Vulnerable Software and Affected Versions Windows Kerberos affected versions not specified Description A use-after-free condition in Windows Kerberos allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an applicatio...

PT-2026-70559

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description A flaw in the Windows Routing and Remote Access Service RRAS allows remote attackers to execute arbitrary code, potentially granting unauthorized access...

PT-2026-70663

Name of the Vulnerable Software and Affected Versions Windows iSCSI Target Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows iSCSI Target Service. This issue allows an unauthorized remote attacker to execute arbitrary code over a network,...

PT-2026-70479

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows DHCP Server, which allows an unauthorized attacker to disclose sensitive information over an adjacent network...

KB5120242: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (August 2026)

The remote Windows host is missing security update 5120242 or hotpatch 5120229. It is, therefore, affected by multiple vulnerabilities - Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network. CVE-2026-62815 - Stack-based buffer overflow in Windows DNS...

PT-2026-70483

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows DHCP Server, which allows an unauthorized attacker to disclose sensitive information over an adjacent network and...

PT-2026-70736

Name of the Vulnerable Software and Affected Versions Windows Network File System affected versions not specified Description A buffer over-read in the Windows Network File System allows an unauthorized attacker to cause a denial-of-service condition over a network. A buffer over-read occurs when...

PT-2026-70678

Name of the Vulnerable Software and Affected Versions Windows Autopilot affected versions not specified Description A use-after-free condition in Windows Autopilot enables an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...

PT-2026-70547

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description An untrusted pointer dereference in Windows Win32K allows an authorized attacker to locally disclose sensitive information, which may impact the system. Recommendations At the moment,...

PT-2026-70414

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description Weak authentication in the Microsoft Windows Search Component allows an authorized attacker to disclose sensitive information locally, which can affect the system...

PT-2026-70517

Name of the Vulnerable Software and Affected Versions Windows Remote Access Connection Manager affected versions not specified Description A heap-based buffer overflow occurs in the Windows Remote Access Connection Manager. This issue allows an authorized attacker to elevate privileges locally on...

PT-2026-70577

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is no...

PT-2026-70423

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A buffer over-read in Windows NTFS allows an unauthorized attacker to disclose sensitive information through a physical attack. A buffer over-read occurs when a program reads more data...

PT-2026-70419

Name of the Vulnerable Software and Affected Versions Windows Graphics Kernel affected versions not specified Description A use-after-free condition in the Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs...

PT-2026-70542

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description A stack-based buffer overflow in Windows TCP/IP allows an unauthorized remote attacker to execute arbitrary code over a network, potentially compromising the system. Recommendations At...

PT-2026-70499

Name of the Vulnerable Software and Affected Versions Windows Management Instrumentation affected versions not specified Description An out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose sensitive information locally and affect the system. An...