https://ot-advisories.com/atom.xml OT-Advisories OT/ICS vulnerability intelligence for defenders 2026-10-30T02:23:51Z OT-Advisories https://ot-advisories.com/advisories/CVE-2026-83748/ Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83748

Key Details

CVECVE-2026-83748
CVSS Score / Version
9.8 (Critical) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.72% probability of exploitation in the next 30 days (53% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83748
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83748

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83715/ Microsoft Windows 11 (version 23H2) Authentication Bypass Rated 7.1 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Authentication Bypass Rated 7.1 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83715

Key Details

CVECVE-2026-83715
CVSS Score / Version
7.1 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
see table below
Classified as
CWE-306 (Missing Authentication for Critical Function)
Exploitation prediction (EPSS)
0.29% probability of exploitation in the next 30 days (20% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83715
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83715

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85834/ Windows Windows TCP/IP stack Heap Buffer Overflow Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows TCP/IP stack Heap Buffer Overflow Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85834

Key Details

CVECVE-2026-85834
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85834
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85834

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83586/ Microsoft Windows 11 (version 23H2) Weak Authentication Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Weak Authentication Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83586

Key Details

CVECVE-2026-83586
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-1390 (Weak Authentication)
Exploitation prediction (EPSS)
0.28% probability of exploitation in the next 30 days (19% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83586
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83586

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-58014/ Enterprise Linux GLib Denial of Service Reachable by Unauthenticated Remote Attackers (CVSS 7.3) 2026-10-03T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Enterprise Linux GLib Denial of Service Reachable by Unauthenticated Remote Attackers (CVSS 7.3)

Status: UPDATED  |  Advisory ID: CVE-2026-58014

Key Details

CVECVE-2026-58014
CVSS Score / Version
7.3 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is low; availability impact is low.
Affected products
see table below
Classified as
CWE-193 (Off-by-one Error)
Exploitation prediction (EPSS)
0.49% probability of exploitation in the next 30 days (41% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatEnterprise Linux
Red HatRed Hat OpenShift AI 3.4
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat OpenShift AI 3.5
Red HatRed Hat Update Infrastructure 5
Red HatRed Hat OpenShift Container Platform 4.12
Red HatRed Hat OpenShift Container Platform 4.13
Red HatRed Hat OpenShift Container Platform 4.14
Red HatRed Hat OpenShift Container Platform 4.16
Red HatRed Hat OpenShift Container Platform 4.17
Red HatRed Hat OpenShift Container Platform 4.22
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatRed Hat Enterprise Linux 6
Red HatCert Manager support for Red Hat OpenShift release 1.20
Red HatRed Hat AI Inference Server 3.2
Red HatRed Hat Discovery 2
Red HatRed Hat OpenShift AI 3.0
Red HatRed Hat OpenShift AI 3.2
GNOMEglib
Red HatCert Manager support for Red Hat OpenShift release 1.19
Red HatRed Hat AI Inference Server 3.5
Red HatCert Manager support for Red Hat OpenShift release 1.17
Red HatCert Manager support for Red Hat OpenShift release 1.18
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with an empty value. This flaw can cause an out-of-bounds access of 1 byte or a denial of service when the out-of-bounds access crosses a page boundary. (NVD)

What to Do

Monitor Red Hat's and GNOME's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-58014
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-58014
Vendor advisoryhttps://access.redhat.com/security/cve/CVE-2026-58014

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83738/ Windows Winsock Race Condition Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Winsock Race Condition Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83738

Key Details

CVECVE-2026-83738
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
Exploitation prediction (EPSS)
0.22% probability of exploitation in the next 30 days (12% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83738
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83738

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70110/ Microsoft Windows 11 (version 23H2) Stack Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Stack Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70110

Key Details

CVECVE-2026-70110
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-121 (Stack-based Buffer Overflow)
Exploitation prediction (EPSS)
0.43% probability of exploitation in the next 30 days (35% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Stack-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70110
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70110

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83692/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83692

Key Details

CVECVE-2026-83692
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83692
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83692

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-96280/ OCI Delta Stream Parser Reads Sizes as 64-Bit Values but Passes Them to 32-Bit GLib Functions, Causing Truncation on 32-Bit Systems 2026-10-10T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

OCI Delta Stream Parser Reads Sizes as 64-Bit Values but Passes Them to 32-Bit GLib Functions, Causing Truncation on 32-Bit Systems

Status: UPDATED  |  Advisory ID: CVE-2026-96280

Key Details

CVECVE-2026-96280
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat Enterprise Linux 7
Classified as
CWE-197 (Numeric Truncation Error)
Exploitation prediction (EPSS)
0.66% probability of exploitation in the next 30 days (51% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 7
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize (32 bits on 32-bit systems), causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an OCI registry can craft a delta stream that triggers this during flatpak install/update, potentially achieving code execution on 32-bit systems. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-96280
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-96280

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83712/ Microsoft Windows 11 (version 23H2) Out-Of-Bounds Write Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Out-Of-Bounds Write Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83712

Key Details

CVECVE-2026-83712
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-787 (Out-of-bounds Write)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83712
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83712

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83726/ Windows Desktop Window Manager (DWM) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Desktop Window Manager (DWM) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83726

Key Details

CVECVE-2026-83726
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83726
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83726

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83910/ Critical Windows Remote Procedure Call (RPC) Out-Of-Bounds Write Scores 9.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Critical Windows Remote Procedure Call (RPC) Out-Of-Bounds Write Scores 9.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83910

Key Details

CVECVE-2026-83910
CVSS Score / Version
9.8 (Critical) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-787 (Out-of-bounds Write)
Exploitation prediction (EPSS)
0.96% probability of exploitation in the next 30 days (61% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83910
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83910

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83757/ Windows Win32k graphics driver Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Win32k graphics driver Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83757

Key Details

CVECVE-2026-83757
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83757
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83757

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85828/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85828

Key Details

CVECVE-2026-85828
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85828
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85828

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-96108/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-96108

Key Details

CVECVE-2026-96108
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.31% probability of exploitation in the next 30 days (22% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-96108
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-96108

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83754/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-83754

Key Details

CVECVE-2026-83754
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.60% probability of exploitation in the next 30 days (47% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83754
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83754

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83675/ Windows Windows Kernel Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows Kernel Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83675

Key Details

CVECVE-2026-83675
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows 11 (version 24H2), Microsoft Windows 11 (version 25H2), Microsoft Windows 11 (version 26H1), Microsoft Windows Server 2025, and Microsoft Windows 11 Version 26H2
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83675
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83675

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85849/ Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85849

Key Details

CVECVE-2026-85849
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-59 (Improper Link Resolution Before File Access ('Link Following'))
Exploitation prediction (EPSS)
0.41% probability of exploitation in the next 30 days (34% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85849
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85849

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83522/ Windows IKE/IPsec Reliance On Untrusted Inputs In A Security Decision Reachable by Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows IKE/IPsec Reliance On Untrusted Inputs In A Security Decision Reachable by Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-83522

Key Details

CVECVE-2026-83522
CVSS Score / Version
8.1 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-807 (Reliance on Untrusted Inputs in a Security Decision)
Exploitation prediction (EPSS)
0.72% probability of exploitation in the next 30 days (53% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83522
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83522

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83846/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83846

Key Details

CVECVE-2026-83846
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.24% probability of exploitation in the next 30 days (14% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83846
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83846

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-46300/ Linux Kernel skbuff Coalescing Drops the Shared-Frag Marker, Now on CISA's KEV List With an October 31st Federal Deadline 2026-10-06T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Linux Kernel skbuff Coalescing Drops the Shared-Frag Marker, Now on CISA's KEV List With an October 31st Federal Deadline

Status: KEV  |  Advisory ID: CVE-2026-46300

Key Details

CVECVE-2026-46300
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Exploitation status
Listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, indicating confirmed active exploitation.
Classified as
CWE-787 (Out-of-bounds Write)
KEV listing
Added to CISA's Known Exploited Vulnerabilities (KEV) catalog on 2026-10-28.
Exploitation prediction (EPSS)
10.19% probability of exploitation in the next 30 days (96% percentile) -- FIRST.org's EPSS model.
Federal remediation deadline
2026-10-31 (CISA KEV, Binding Operational Directive).

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
LinuxLinux Kernel
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat OpenShift Container Platform 4.12
Red HatRed Hat OpenShift Container Platform 4.13
Red HatRed Hat OpenShift Container Platform 4.14
Red HatRed Hat OpenShift Container Platform 4.15
Red HatRed Hat OpenShift Container Platform 4.16
Red HatRed Hat OpenShift Container Platform 4.17
Red HatRed Hat OpenShift Container Platform 4.18
Red HatRed Hat OpenShift Container Platform 4.19
Red HatRed Hat OpenShift Container Platform 4.20
Red HatRed Hat OpenShift Container Platform 4.21
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
Red HatNVIDIA for RHEL 10
SubsystemsControllers & Field I/O, OT Supporting Infrastructure
SectorsAll Sectors

What to Know

In the Linux kernel, the following vulnerability has been resolved:

net: skbuff: preserve shared-frag marker during coalescing

skb_try_coalesce() can attach paged frags from @from to @to. If @from

has SKBFL_SHARED_FRAG set, the resulting @to skb can contain the same

externally-owned or page-cache-backed frags, but the shared-frag marker

is currently lost.

That breaks the invariant relied on by later in-place writers. In

particular, ESP input checks skb_has_shared_frag() before deciding

whether an uncloned nonlinear skb can skip skb_cow_data(). If TCP

receive coalescing has moved shared frags into an unmarked skb, ESP can

see skb_has_shared_frag() as false and decrypt in place over page-cache

backed frags.

Propagate SKBFL_SHARED_FRAG when skb_try_coalesce() transfers paged

frags. The tailroom copy path does not need the marker because it copies

bytes into @to's linear data rather than transferring frag descriptors. (NVD)

What to Do

Monitor Linux, Red Hat, and Siemens's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-46300
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-46300
Vendor advisoryhttps://cert-portal.siemens.com/productcert/html/ssa-019113.html

KEV Required Action

FieldValue
KEV Linkhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog
Date Added to KEV2026-10-28
Required Action Due Date2026-10-31
Required ActionApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83767/ Microsoft Windows 11 (version 23H2) Stack Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Stack Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83767

Key Details

CVECVE-2026-83767
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-121 (Stack-based Buffer Overflow)
Exploitation prediction (EPSS)
0.24% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83767
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83767

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83716/ Windows Hyper-V Heap Buffer Overflow Rated 8.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Hyper-V Heap Buffer Overflow Rated 8.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83716

Key Details

CVECVE-2026-83716
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83716
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83716

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83689/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83689

Key Details

CVECVE-2026-83689
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83689
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83689

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-96275/ Flatpak extra_data Download Symlinks Combined with Path Traversal Write Files to Arbitrary Host Paths as Root, Scoring 8.8 2026-10-03T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Flatpak extra_data Download Symlinks Combined with Path Traversal Write Files to Arbitrary Host Paths as Root, Scoring 8.8

Status: UPDATED  |  Advisory ID: CVE-2026-96275

Key Details

CVECVE-2026-96275
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat Enterprise Linux 7
Classified as
CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
Exploitation prediction (EPSS)
0.40% probability of exploitation in the next 30 days (32% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 7
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extract_extra_data(). On system installs, the write happens as root. Two issues combine: `files/extra` is resolved via path operations that follow symlinks, and blob names from `xa.extra-data-sources` are not sanitized against `..` traversal. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-96275
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-96275

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83687/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83687

Key Details

CVECVE-2026-83687
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83687
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83687

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83587/ Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83587

Key Details

CVECVE-2026-83587
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-822 (Untrusted Pointer Dereference)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83587
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83587

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85856/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.1 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.1 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85856

Key Details

CVECVE-2026-85856
CVSS Score / Version
7.1 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is adjacent; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.36% probability of exploitation in the next 30 days (29% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85856
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85856

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83727/ Microsoft Windows 11 (version 23H2) Buffer Over-Read Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Buffer Over-Read Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83727

Key Details

CVECVE-2026-83727
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-126 (Buffer Over-read)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83727
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83727

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83717/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83717

Key Details

CVECVE-2026-83717
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83717
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83717

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85321/ Windows Active Directory Allocation Of Resources Without Limits Or Throttling Reachable by Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Active Directory Allocation Of Resources Without Limits Or Throttling Reachable by Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-85321

Key Details

CVECVE-2026-85321
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
Microsoft Windows Server 2025, Microsoft Windows Server 2016, Microsoft Windows Server 2019, Microsoft Windows Server 2022, and Microsoft Windows Server 2012 R2
Classified as
CWE-770 (Allocation of Resources Without Limits or Throttling)
Exploitation prediction (EPSS)
1.06% probability of exploitation in the next 30 days (64% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows Server 2025
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85321
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85321

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83908/ Windows Remote Procedure Call (RPC) Release Of Invalid Pointer Or Reference Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Remote Procedure Call (RPC) Release Of Invalid Pointer Or Reference Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83908

Key Details

CVECVE-2026-83908
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-763 (Release of Invalid Pointer or Reference)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83908
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83908

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85846/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85846

Key Details

CVECVE-2026-85846
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.20% probability of exploitation in the next 30 days (10% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85846
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85846

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83669/ Microsoft Windows 11 (version 23H2) Use Of Uninitialized Resource Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use Of Uninitialized Resource Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83669

Key Details

CVECVE-2026-83669
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-908 (Use of Uninitialized Resource)
Exploitation prediction (EPSS)
0.38% probability of exploitation in the next 30 days (30% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83669
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83669

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83644/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83644

Key Details

CVECVE-2026-83644
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83644
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83644

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85854/ Windows Desktop Window Manager (DWM) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Desktop Window Manager (DWM) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85854

Key Details

CVECVE-2026-85854
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85854
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85854

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85318/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85318

Key Details

CVECVE-2026-85318
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85318
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85318

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83920/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83920

Key Details

CVECVE-2026-83920
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.26% probability of exploitation in the next 30 days (17% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83920
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83920

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83513/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83513

Key Details

CVECVE-2026-83513
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83513
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83513

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83863/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83863

Key Details

CVECVE-2026-83863
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83863
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83863

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83523/ Microsoft Windows 11 (version 24H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 24H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-83523

Key Details

CVECVE-2026-83523
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows 11 (version 24H2), Microsoft Windows 11 (version 25H2), Microsoft Windows 11 (version 26H1), Microsoft Windows Server 2025, and Microsoft Windows 11 Version 26H2
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.84% probability of exploitation in the next 30 days (57% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Image Acquisition allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83523
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83523

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85833/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85833

Key Details

CVECVE-2026-85833
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85833
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85833

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83641/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83641

Key Details

CVECVE-2026-83641
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83641
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83641

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83911/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83911

Key Details

CVECVE-2026-83911
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83911
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83911

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83732/ Windows Win32k graphics driver Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Win32k graphics driver Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83732

Key Details

CVECVE-2026-83732
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83732
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83732

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83702/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83702

Key Details

CVECVE-2026-83702
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83702
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83702

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85855/ Windows Desktop Window Manager (DWM) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Desktop Window Manager (DWM) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85855

Key Details

CVECVE-2026-85855
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows 11 (version 24H2), Microsoft Windows 11 (version 25H2), Microsoft Windows 11 (version 26H1), Microsoft Windows Server 2025, and Microsoft Windows 11 Version 26H2
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.29% probability of exploitation in the next 30 days (20% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85855
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85855

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83769/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83769

Key Details

CVECVE-2026-83769
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.37% probability of exploitation in the next 30 days (29% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83769
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83769

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83758/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83758

Key Details

CVECVE-2026-83758
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83758
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83758

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83655/ Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-83655

Key Details

CVECVE-2026-83655
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
1.20% probability of exploitation in the next 30 days (68% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to deny service over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83655
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83655

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83682/ Windows Windows TCP/IP stack Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows TCP/IP stack Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83682

Key Details

CVECVE-2026-83682
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83682
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83682

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83647/ Windows Active Directory Out-Of-Bounds Read Reachable by Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Active Directory Out-Of-Bounds Read Reachable by Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-83647

Key Details

CVECVE-2026-83647
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
1.15% probability of exploitation in the next 30 days (66% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83647
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83647

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83679/ Windows Windows Defender Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows Defender Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83679

Key Details

CVECVE-2026-83679
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83679
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83679

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83654/ Microsoft Windows 11 (version 23H2) Authentication Bypass Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Authentication Bypass Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83654

Key Details

CVECVE-2026-83654
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-306 (Missing Authentication for Critical Function)
Exploitation prediction (EPSS)
0.28% probability of exploitation in the next 30 days (19% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83654
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83654

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83677/ Microsoft Windows 11 (version 24H2) Missing Release Of Memory After Effective Lifetime Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 24H2) Missing Release Of Memory After Effective Lifetime Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-83677

Key Details

CVECVE-2026-83677
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
Microsoft Windows 11 (version 24H2), Microsoft Windows 11 (version 25H2), Microsoft Windows 11 (version 26H1), Microsoft Windows Server 2025, and Microsoft Windows 11 Version 26H2
Classified as
CWE-401 (Missing Release of Memory after Effective Lifetime)
Exploitation prediction (EPSS)
0.87% probability of exploitation in the next 30 days (58% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83677
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83677

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83917/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83917

Key Details

CVECVE-2026-83917
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.22% probability of exploitation in the next 30 days (12% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83917
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83917

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70198/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70198

Key Details

CVECVE-2026-70198
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70198
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70198

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83901/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83901

Key Details

CVECVE-2026-83901
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83901
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83901

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83750/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83750

Key Details

CVECVE-2026-83750
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.21% probability of exploitation in the next 30 days (10% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83750
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83750

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83704/ Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83704

Key Details

CVECVE-2026-83704
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-59 (Improper Link Resolution Before File Access ('Link Following'))
Exploitation prediction (EPSS)
0.42% probability of exploitation in the next 30 days (35% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83704
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83704

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83670/ Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-83670

Key Details

CVECVE-2026-83670
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is none.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.96% probability of exploitation in the next 30 days (61% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83670
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83670

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-74860/ libxml2 Python Bindings Double-Free DTD Enumerated Attribute During SAX Parsing, Causing Denial of Service with Scope Impact Scoring 8.5 2026-10-06T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

libxml2 Python Bindings Double-Free DTD Enumerated Attribute During SAX Parsing, Causing Denial of Service with Scope Impact Scoring 8.5

Status: UPDATED  |  Advisory ID: CVE-2026-74860

Key Details

CVECVE-2026-74860
CVSS Score / Version
8.5 (High) / CVSS v3.1
Updated2026-10-30
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is high; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-763 (Release of Invalid Pointer or Reference)
Exploitation prediction (EPSS)
0.45% probability of exploitation in the next 30 days (37% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 7
Red HatRed Hat Update Infrastructure 5
Red HatRed Hat Hardened Images
Red HatCert Manager support for Red Hat OpenShift release 1.20
Red HatRed Hat Cost Management On-Premise 1
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-free error in the SAX attributeDecl callback handler, where a string is freed twice. This flaw can lead to a denial of service (DoS) due to a reproducible crash in Python applications using the libxml2 SAX bindings. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-74860
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-74860

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83868/ Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83868

Key Details

CVECVE-2026-83868
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
Exploitation prediction (EPSS)
0.16% probability of exploitation in the next 30 days (5% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83868
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83868

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85851/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85851

Key Details

CVECVE-2026-85851
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.33% probability of exploitation in the next 30 days (24% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85851
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85851

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-102559/ libsoup Wraps Size Values When Masking Large Outgoing WebSocket Client Frames, Causing Heap Overflow During Message Send 2026-10-10T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

libsoup Wraps Size Values When Masking Large Outgoing WebSocket Client Frames, Causing Heap Overflow During Message Send

Status: UPDATED  |  Advisory ID: CVE-2026-102559

Key Details

CVECVE-2026-102559
CVSS Score / Version
8.6 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is low; availability impact is high.
Affected products
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat Enterprise Linux 7
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.38% probability of exploitation in the next 30 days (30% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 7
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-102559
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-102559

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83728/ Windows Hyper-V Improper Validation Of Syntactic Correctness Of Input Rated 8.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Hyper-V Improper Validation Of Syntactic Correctness Of Input Rated 8.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83728

Key Details

CVECVE-2026-83728
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-1286 (Improper Validation of Syntactic Correctness of Input)
Exploitation prediction (EPSS)
0.24% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83728
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83728

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85832/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85832

Key Details

CVECVE-2026-85832
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.37% probability of exploitation in the next 30 days (29% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85832
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85832

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85863/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85863

Key Details

CVECVE-2026-85863
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.24% probability of exploitation in the next 30 days (14% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85863
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85863

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83694/ Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83694

Key Details

CVECVE-2026-83694
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83694
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83694

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83741/ Windows Internet Explorer Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Internet Explorer Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83741

Key Details

CVECVE-2026-83741
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.24% probability of exploitation in the next 30 days (14% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83741
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83741

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85829/ Microsoft Windows 11 (version 23H2) Double-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Double-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85829

Key Details

CVECVE-2026-85829
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-415 (Double Free)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85829
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85829

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-69966/ Microsoft Windows 11 (version 23H2) Integer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Integer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-69966

Key Details

CVECVE-2026-69966
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-190 (Integer Overflow or Wraparound)
Exploitation prediction (EPSS)
0.31% probability of exploitation in the next 30 days (22% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Integer overflow or wraparound in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-69966
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-69966

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83710/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83710

Key Details

CVECVE-2026-83710
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83710
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83710

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83921/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83921

Key Details

CVECVE-2026-83921
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.28% probability of exploitation in the next 30 days (19% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83921
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83921

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85943/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85943

Key Details

CVECVE-2026-85943
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.19% probability of exploitation in the next 30 days (8% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85943
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85943

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83690/ Windows Windows Kernel Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows Kernel Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83690

Key Details

CVECVE-2026-83690
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83690
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83690

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83784/ Microsoft Windows 11 (version 23H2) Path Traversal Rated 8.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Path Traversal Rated 8.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83784

Key Details

CVECVE-2026-83784
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-36 (Absolute Path Traversal)
Exploitation prediction (EPSS)
0.95% probability of exploitation in the next 30 days (61% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83784
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83784

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83740/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83740

Key Details

CVECVE-2026-83740
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83740
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83740

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83916/ Microsoft Windows 11 (version 23H2) Double-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Double-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83916

Key Details

CVECVE-2026-83916
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-415 (Double Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Double free in Windows Error Reporting allows an authorized attacker to execute code locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83916
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83916

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-102556/ libsoup Passes Internal Buffer Memory in the WebSocket Pong Signal GByteArray, Creating a Use-After-Free Exposure for Signal Handler Code 2026-10-10T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

libsoup Passes Internal Buffer Memory in the WebSocket Pong Signal GByteArray, Creating a Use-After-Free Exposure for Signal Handler Code

Status: UPDATED  |  Advisory ID: CVE-2026-102556

Key Details

CVECVE-2026-102556
CVSS Score / Version
8.6 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is low; availability impact is high.
Affected products
Red Hat Enterprise Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat Enterprise Linux 7
Classified as
CWE-843 (Access of Resource Using Incompatible Type ('Type Confusion'))
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatEnterprise Linux
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 7
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap corruption or a crash upon receiving a crafted Pong. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-102556
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-102556

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83519/ Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83519

Key Details

CVECVE-2026-83519
CVSS Score / Version
9.8 (Critical) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.96% probability of exploitation in the next 30 days (61% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83519
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83519

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83578/ Critical Windows PowerShell Heap Buffer Overflow Scores 9.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Critical Windows PowerShell Heap Buffer Overflow Scores 9.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83578

Key Details

CVECVE-2026-83578
CVSS Score / Version
9.8 (Critical) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.96% probability of exploitation in the next 30 days (61% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Integer underflow (wrap or wraparound) in Windows PowerShell allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83578
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83578

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83922/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83922

Key Details

CVECVE-2026-83922
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83922
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83922

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83914/ Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-83914

Key Details

CVECVE-2026-83914
CVSS Score / Version
8.1 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.72% probability of exploitation in the next 30 days (53% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83914
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83914

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83751/ Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83751

Key Details

CVECVE-2026-83751
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows 11 (version 24H2), Microsoft Windows 11 (version 25H2), Microsoft Windows 11 (version 26H1), and Microsoft Windows 11 Version 26H2
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83751
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83751

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83650/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83650

Key Details

CVECVE-2026-83650
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83650
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83650

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83596/ WebKitGTK Memory Corruption on Malicious Web Content Can Be Triggered by Processing a Specially Crafted Page 2026-10-10T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

WebKitGTK Memory Corruption on Malicious Web Content Can Be Triggered by Processing a Specially Crafted Page

Status: UPDATED  |  Advisory ID: CVE-2026-83596

Key Details

CVECVE-2026-83596
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 7, WebKit WebKit, and WebKitGTK WebKitGTK
Classified as
CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'))
Exploitation prediction (EPSS)
0.29% probability of exploitation in the next 30 days (20% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 7
WebKitWebKit
WebKitGTKWebKitGTK
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling. (NVD)

What to Do

Monitor Red Hat, WebKit, and WebKitGTK's web pages for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83596
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83596

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-102557/ libsoup WebSocket Fragment Reassembly Does Not Cap Total Message Size, Allowing Heap Exhaustion via Large Fragmented Payloads 2026-10-10T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

libsoup WebSocket Fragment Reassembly Does Not Cap Total Message Size, Allowing Heap Exhaustion via Large Fragmented Payloads

Status: UPDATED  |  Advisory ID: CVE-2026-102557

Key Details

CVECVE-2026-102557
CVSS Score / Version
8.6 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is low; availability impact is high.
Affected products
Red Hat Enterprise Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat Enterprise Linux 7
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatEnterprise Linux
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 7
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation while the implementation still used the full length, leading to heap corruption or a crash. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-102557
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-102557

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83847/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83847

Key Details

CVECVE-2026-83847
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.31% probability of exploitation in the next 30 days (22% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83847
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83847

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83735/ Windows Windows Kernel Release Of Invalid Pointer Or Reference Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows Kernel Release Of Invalid Pointer Or Reference Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83735

Key Details

CVECVE-2026-83735
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-763 (Release of Invalid Pointer or Reference)
Exploitation prediction (EPSS)
0.38% probability of exploitation in the next 30 days (30% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83735
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83735

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-96512/ sudo NOTBEFORE/NOTAFTER Time Window Enforcement Reads the TZ Environment Variable, Allowing Low-Privileged Users to Shift the Clock and Bypass Scheduling Constraints 2026-10-05T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

sudo NOTBEFORE/NOTAFTER Time Window Enforcement Reads the TZ Environment Variable, Allowing Low-Privileged Users to Shift the Clock and Bypass Scheduling Constraints

Status: UPDATED  |  Advisory ID: CVE-2026-96512

Key Details

CVECVE-2026-96512
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-863 (Incorrect Authorization)
Exploitation prediction (EPSS)
0.14% probability of exploitation in the next 30 days (3% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 7
Red HatRed Hat Update Infrastructure 5
Red HatRed Hat Hardened Images
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Because sudo is a setuid-root program, an unprivileged local user can set TZ to an extreme timezone offset to shift the authorization window by up to approximately 25 hours, causing expired rules to be treated as valid. This allows the user to execute commands outside the intended time window. Authentication is not bypassed; only the time-based authorization check is affected. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-96512
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-96512

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83678/ Windows Windows TCP/IP stack Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows TCP/IP stack Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83678

Key Details

CVECVE-2026-83678
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83678
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83678

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83580/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83580

Key Details

CVECVE-2026-83580
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.29% probability of exploitation in the next 30 days (20% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83580
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83580

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83693/ Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83693

Key Details

CVECVE-2026-83693
CVSS Score / Version
9.8 (Critical) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
1.00% probability of exploitation in the next 30 days (62% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83693
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83693

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83680/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83680

Key Details

CVECVE-2026-83680
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.20% probability of exploitation in the next 30 days (10% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83680
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83680

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-95943/ Microsoft Windows 11 (version 23H2) Double-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Double-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-95943

Key Details

CVECVE-2026-95943
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-415 (Double Free)
Exploitation prediction (EPSS)
0.24% probability of exploitation in the next 30 days (14% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Double free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-95943
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-95943

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83725/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-83725

Key Details

CVECVE-2026-83725
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.61% probability of exploitation in the next 30 days (48% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83725
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83725

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83918/ Windows Windows Kernel Integer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows Kernel Integer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83918

Key Details

CVECVE-2026-83918
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-190 (Integer Overflow or Wraparound)
Exploitation prediction (EPSS)
0.26% probability of exploitation in the next 30 days (17% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83918
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83918

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83718/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83718

Key Details

CVECVE-2026-83718
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83718
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83718

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85864/ Microsoft Windows 11 (version 23H2) Improper Restriction Of Names For Files And Other Resources Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Improper Restriction Of Names For Files And Other Resources Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85864

Key Details

CVECVE-2026-85864
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-641 (Improper Restriction of Names for Files and Other Resources)
Exploitation prediction (EPSS)
0.74% probability of exploitation in the next 30 days (54% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper privilege management in Python allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85864
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85864

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83517/ Critical Windows Windows Media Heap Buffer Overflow Scores 9.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Critical Windows Windows Media Heap Buffer Overflow Scores 9.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83517

Key Details

CVECVE-2026-83517
CVSS Score / Version
9.8 (Critical) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.96% probability of exploitation in the next 30 days (61% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83517
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83517

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85843/ Microsoft Windows 11 (version 23H2) Use Of Uninitialized Resource Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use Of Uninitialized Resource Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85843

Key Details

CVECVE-2026-85843
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-908 (Use of Uninitialized Resource)
Exploitation prediction (EPSS)
0.37% probability of exploitation in the next 30 days (29% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85843
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85843

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83514/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83514

Key Details

CVECVE-2026-83514
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83514
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83514

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-86320/ flatpak-builder Leaves Git Hooks Active When Applying Patches with use-git-am, Letting a Malicious Patch Source Run Arbitrary Code on the Build Host 2026-10-12T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

flatpak-builder Leaves Git Hooks Active When Applying Patches with use-git-am, Letting a Malicious Patch Source Run Arbitrary Code on the Build Host

Status: UPDATED  |  Advisory ID: CVE-2026-86320

Key Details

CVECVE-2026-86320
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-30
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, and Red Hat Enterprise Linux 9
Classified as
CWE-94 (Improper Control of Generation of Code ('Code Injection'))
Exploitation prediction (EPSS)
0.22% probability of exploitation in the next 30 days (12% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary code execution with the privileges of the user running flatpak-builder. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-86320
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-86320

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70109/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70109

Key Details

CVECVE-2026-70109
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.43% probability of exploitation in the next 30 days (35% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70109
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70109

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83749/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83749

Key Details

CVECVE-2026-83749
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.20% probability of exploitation in the next 30 days (10% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83749
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83749

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85853/ Windows Desktop Window Manager (DWM) Out-Of-Bounds Read Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Desktop Window Manager (DWM) Out-Of-Bounds Read Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85853

Key Details

CVECVE-2026-85853
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85853
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85853

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83709/ Windows NTLM authentication Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows NTLM authentication Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83709

Key Details

CVECVE-2026-83709
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83709
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83709

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83919/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83919

Key Details

CVECVE-2026-83919
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (16% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83919
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83919

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83762/ Windows Win32k graphics driver Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Win32k graphics driver Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83762

Key Details

CVECVE-2026-83762
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83762
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83762

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83516/ Microsoft Windows 11 (version 24H2) Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 24H2) Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-83516

Key Details

CVECVE-2026-83516
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
1.20% probability of exploitation in the next 30 days (68% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83516
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83516

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83721/ Windows Win32k graphics driver Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Win32k graphics driver Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83721

Key Details

CVECVE-2026-83721
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows 11 (version 24H2), Microsoft Windows 11 (version 25H2), Microsoft Windows 11 (version 26H1), Microsoft Windows Server 2025, and Microsoft Windows 11 Version 26H2
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83721
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83721

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-78376/ WebKitGTK Use-After-Free Triggered by Malicious Web Content Enables Remote Code Execution 2026-10-10T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

WebKitGTK Use-After-Free Triggered by Malicious Web Content Enables Remote Code Execution

Status: UPDATED  |  Advisory ID: CVE-2026-78376

Key Details

CVECVE-2026-78376
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 7, WebKit WebKit, and WebKitGTK WebKitGTK
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.29% probability of exploitation in the next 30 days (20% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 7
WebKitWebKit
WebKitGTKWebKitGTK
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption. (NVD)

What to Do

Monitor Red Hat, WebKit, and WebKitGTK's web pages for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-78376
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-78376

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83912/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83912

Key Details

CVECVE-2026-83912
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.26% probability of exploitation in the next 30 days (17% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83912
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83912

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83759/ Microsoft Windows 11 (version 23H2) Code Injection Permits Code Injection 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Code Injection Permits Code Injection

Status: UPDATED  |  Advisory ID: CVE-2026-83759

Key Details

CVECVE-2026-83759
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-94 (Improper Control of Generation of Code ('Code Injection'))
Exploitation prediction (EPSS)
0.72% probability of exploitation in the next 30 days (53% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83759
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83759

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83923/ Microsoft Windows 11 (version 23H2) Path Traversal Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Path Traversal Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-83923

Key Details

CVECVE-2026-83923
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-23 (Relative Path Traversal)
Exploitation prediction (EPSS)
0.92% probability of exploitation in the next 30 days (60% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83923
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83923

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83877/ Microsoft Windows 11 (version 23H2) Integer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Integer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83877

Key Details

CVECVE-2026-83877
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-190 (Integer Overflow or Wraparound)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83877
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83877

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83676/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83676

Key Details

CVECVE-2026-83676
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83676
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83676

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83724/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83724

Key Details

CVECVE-2026-83724
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.22% probability of exploitation in the next 30 days (12% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83724
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83724

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-16118/ Red Hat OpenShift AI 3.3 xdgmime Buffer Overflow Reachable by Unauthenticated Local Attackers (CVSS 7.1) 2026-10-03T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Red Hat OpenShift AI 3.3 xdgmime Buffer Overflow Reachable by Unauthenticated Local Attackers (CVSS 7.1)

Status: UPDATED  |  Advisory ID: CVE-2026-16118

Key Details

CVECVE-2026-16118
CVSS Score / Version
7.1 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is none; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.28% probability of exploitation in the next 30 days (19% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat OpenShift AI 3.3
Red HatRed Hat OpenShift AI 3.4
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7
Red HatRed Hat OpenShift AI 3.5
Red HatRed Hat Update Infrastructure 5
Red HatCert Manager support for Red Hat OpenShift release 1.20
Red HatRed Hat AI Inference Server 3.2
Red HatRed Hat OpenShift AI 3.0
Red HatRed Hat OpenShift AI 3.2
xdgxdgmime
Red HatRed Hat Cost Management On-Premise 1
Red HatRed Hat AI Inference Server 3.5
Red HatCert Manager support for Red Hat OpenShift release 1.17
Red HatCert Manager support for Red Hat OpenShift release 1.18
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location (e.g., in the $XDG_DATA_HOME/mime/magic path) is parsed by an application performing MIME type detection (e.g., via g_content_type_guess()). When performing byte-swap, incorrect pointer arithmetic on the write side causes an out-of-bounds write of 2 bytes, resulting in an application crash or memory corruption. (NVD)

What to Do

Monitor Red Hat's and xdg's web pages for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-16118
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-16118

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85842/ Microsoft Windows 11 (version 23H2) Format String Vulnerability Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Format String Vulnerability Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85842

Key Details

CVECVE-2026-85842
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-134 (Use of Externally-Controlled Format String)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85842
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85842

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83643/ Microsoft Windows 11 (version 23H2) Stack Buffer Overflow Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Stack Buffer Overflow Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-83643

Key Details

CVECVE-2026-83643
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-121 (Stack-based Buffer Overflow)
Exploitation prediction (EPSS)
0.84% probability of exploitation in the next 30 days (57% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83643
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83643

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83691/ Windows Windows DHCP Server Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows DHCP Server Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83691

Key Details

CVECVE-2026-83691
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83691
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83691

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83915/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83915

Key Details

CVECVE-2026-83915
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83915
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83915

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-102558/ libsoup WebSocket Connection Grows Its Receive Buffer Without Bound When max-incoming-payload-size Is Zero, Enabling Remote Memory Exhaustion 2026-10-10T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

libsoup WebSocket Connection Grows Its Receive Buffer Without Bound When max-incoming-payload-size Is Zero, Enabling Remote Memory Exhaustion

Status: UPDATED  |  Advisory ID: CVE-2026-102558

Key Details

CVECVE-2026-102558
CVSS Score / Version
8.6 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is low; availability impact is high.
Affected products
Red Hat Enterprise Linux, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat Enterprise Linux 7
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.38% probability of exploitation in the next 30 days (30% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatEnterprise Linux
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 7
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

A flaw was found in libsoup. When max-incoming-payload-size is unlimited (0), SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-102558
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-102558

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83659/ Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83659

Key Details

CVECVE-2026-83659
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-59 (Improper Link Resolution Before File Access ('Link Following'))
Exploitation prediction (EPSS)
0.28% probability of exploitation in the next 30 days (19% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83659
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83659

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-96889/ librsvg XInclude Processing of Nested Duplicate Entity Declarations Frees and Reuses Memory, Causing a Use-After-Free on Crafted SVG Files 2026-10-03T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

librsvg XInclude Processing of Nested Duplicate Entity Declarations Frees and Reuses Memory, Causing a Use-After-Free on Crafted SVG Files

Status: UPDATED  |  Advisory ID: CVE-2026-96889

Key Details

CVECVE-2026-96889
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-30
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat Enterprise Linux 7
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.15% probability of exploitation in the next 30 days (4% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 7
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attacker could potentially exploit this to cause a denial of service or execute arbitrary code. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-96889
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-96889

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83903/ Microsoft Windows 11 (version 24H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 24H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83903

Key Details

CVECVE-2026-83903
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows 11 (version 24H2), Microsoft Windows 11 (version 25H2), Microsoft Windows Server 2025, and Microsoft Windows 11 Version 26H2
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83903
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83903

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83708/ Microsoft Windows 11 (version 23H2) Stack Buffer Overflow Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Stack Buffer Overflow Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83708

Key Details

CVECVE-2026-83708
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-121 (Stack-based Buffer Overflow)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83708
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83708

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83902/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83902

Key Details

CVECVE-2026-83902
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.36% probability of exploitation in the next 30 days (28% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83902
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83902

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83700/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83700

Key Details

CVECVE-2026-83700
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83700
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83700

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83688/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-83688

Key Details

CVECVE-2026-83688
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.84% probability of exploitation in the next 30 days (57% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83688
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83688

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85861/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85861

Key Details

CVECVE-2026-85861
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.24% probability of exploitation in the next 30 days (14% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85861
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85861

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85858/ Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85858

Key Details

CVECVE-2026-85858
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85858
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85858

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83707/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83707

Key Details

CVECVE-2026-83707
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83707
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83707

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-56379/ CVE-2026-56379 2026-10-30T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

CVE-2026-56379

Status: UPDATED  |  Advisory ID: CVE-2026-56379

Key Details

CVECVE-2026-56379
CVSS Score / Version
8.1 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Red Hat Enterprise Linux 7 Extended Lifecycle Support and imagemagick imagemagick
Classified as
CWE-116 (Improper Encoding or Escaping of Output)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
imagemagickimagemagick
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

ImageMagick before 7.1.2-15 and 6.9.13-40 contains a command injection vulnerability in the SVG decoder that allows attackers to inject arbitrary MVG drawing commands. Attackers can craft malicious SVG files with injected Magick Vector Graphics commands that execute during rendering. (NVD)

What to Do

Monitor Red Hat's and imagemagick's web pages for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-56379
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-56379

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85848/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85848

Key Details

CVECVE-2026-85848
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.37% probability of exploitation in the next 30 days (29% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85848
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85848

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83739/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.5 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.5 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83739

Key Details

CVECVE-2026-83739
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is adjacent; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.42% probability of exploitation in the next 30 days (35% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83739
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83739

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83763/ Microsoft Windows 11 (version 23H2) Type Confusion Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Type Confusion Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83763

Key Details

CVECVE-2026-83763
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-843 (Access of Resource Using Incompatible Type ('Type Confusion'))
Exploitation prediction (EPSS)
0.36% probability of exploitation in the next 30 days (28% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83763
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83763

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83753/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83753

Key Details

CVECVE-2026-83753
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83753
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83753

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83752/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83752

Key Details

CVECVE-2026-83752
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.20% probability of exploitation in the next 30 days (10% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83752
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83752

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83564/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83564

Key Details

CVECVE-2026-83564
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83564
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83564

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-34485/ CVE-2026-34485 2026-10-30T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

CVE-2026-34485

Status: UPDATED  |  Advisory ID: CVE-2026-34485

Key Details

CVECVE-2026-34485
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Nokia 1830 Global Express (GX)
Classified as
CWE-284 (Improper Access Control)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
NokiaNokia 1830 Global Express (GX)
SubsystemsGeneral OT
SectorsMultiple

What to Know

Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated attacker can bypass the SSH isolation mechanism and gain access to the underlying operating system shell via a custom SSH command. This issue occurs by default in the system and is not the result of misconfiguration. (NVD)

What to Do

Monitor Nokia's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-34485
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-34485

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83913/ Windows Windows Kernel Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows Kernel Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83913

Key Details

CVECVE-2026-83913
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83913
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83913

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83701/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83701

Key Details

CVECVE-2026-83701
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83701
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83701

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83583/ Microsoft Windows 11 (version 23H2) Authorization Bypass Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Authorization Bypass Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83583

Key Details

CVECVE-2026-83583
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-862 (Missing Authorization)
Exploitation prediction (EPSS)
0.30% probability of exploitation in the next 30 days (22% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83583
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83583

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83569/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83569

Key Details

CVECVE-2026-83569
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.33% probability of exploitation in the next 30 days (24% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in HID Parser Library allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83569
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83569

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85860/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-30T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85860

Key Details

CVECVE-2026-85860
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.24% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85860
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85860

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83850/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83850

Key Details

CVECVE-2026-83850
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83850
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83850

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83848/ Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83848

Key Details

CVECVE-2026-83848
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-822 (Untrusted Pointer Dereference)
Exploitation prediction (EPSS)
0.37% probability of exploitation in the next 30 days (29% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83848
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83848

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85872/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85872

Key Details

CVECVE-2026-85872
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85872
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85872

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85884/ Microsoft Windows 11 (version 24H2) Authentication Bypass Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 24H2) Authentication Bypass Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85884

Key Details

CVECVE-2026-85884
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows 11 (version 24H2), Microsoft Windows 11 (version 25H2), Microsoft Windows 11 (version 26H1), and Microsoft Windows 11 Version 26H2
Classified as
CWE-306 (Missing Authentication for Critical Function)
Exploitation prediction (EPSS)
0.39% probability of exploitation in the next 30 days (32% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85884
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85884

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83652/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83652

Key Details

CVECVE-2026-83652
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83652
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83652

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-58016/ Enterprise Linux GLib Out-of-Bounds Read Reachable by Unauthenticated Remote Attackers (CVSS 7.5) 2026-10-03T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Enterprise Linux GLib Out-of-Bounds Read Reachable by Unauthenticated Remote Attackers (CVSS 7.5)

Status: UPDATED  |  Advisory ID: CVE-2026-58016

Key Details

CVECVE-2026-58016
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-191 (Integer Underflow (Wrap or Wraparound))
Exploitation prediction (EPSS)
0.55% probability of exploitation in the next 30 days (44% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatEnterprise Linux
Red HatRed Hat OpenShift AI 3.4
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Update Infrastructure 5
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatRed Hat Enterprise Linux 6
Red HatCert Manager support for Red Hat OpenShift release 1.20
Red HatRed Hat Discovery 2
Red HatRed Hat Insights proxy 1.5
Red HatRed Hat OpenShift AI 3.0
Red HatRed Hat OpenShift AI 3.2
GNOMEglib
Red HatCert Manager support for Red Hat OpenShift release 1.17
Red HatCert Manager support for Red Hat OpenShift release 1.18
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service. (NVD)

What to Do

Monitor Red Hat's and GNOME's web pages for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-58016
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-58016

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83851/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-83851

Key Details

CVECVE-2026-83851
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.61% probability of exploitation in the next 30 days (48% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83851
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83851

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85871/ Windows Windows Kernel Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows Kernel Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85871

Key Details

CVECVE-2026-85871
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85871
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85871

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85869/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85869

Key Details

CVECVE-2026-85869
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85869
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85869

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85868/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85868

Key Details

CVECVE-2026-85868
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85868
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85868

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85874/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85874

Key Details

CVECVE-2026-85874
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85874
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85874

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85870/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85870

Key Details

CVECVE-2026-85870
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.29% probability of exploitation in the next 30 days (20% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85870
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85870

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83785/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83785

Key Details

CVECVE-2026-83785
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.29% probability of exploitation in the next 30 days (20% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83785
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83785

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83852/ Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83852

Key Details

CVECVE-2026-83852
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows 11 (version 24H2), Microsoft Windows 11 (version 25H2), Microsoft Windows 11 (version 26H1), Microsoft Windows Server 2025, and Microsoft Windows 11 Version 26H2
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.20% probability of exploitation in the next 30 days (10% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83852
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83852

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-96951/ CISA's October 16th KEV Deadline Adds Federal Urgency to Microsoft Windows Shell Command Injection That Lets Network Attackers Bypass a Security Feature 2026-10-13T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

CISA's October 16th KEV Deadline Adds Federal Urgency to Microsoft Windows Shell Command Injection That Lets Network Attackers Bypass a Security Feature

Status: KEV  |  Advisory ID: CVE-2026-96951

Key Details

CVECVE-2026-96951
Vulnerability NameMicrosoft Windows Command Injection Vulnerability
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Exploitation status
Listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, indicating confirmed active exploitation.
Classified as
CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection'))
KEV listing
Added to CISA's Known Exploited Vulnerabilities (KEV) catalog on 2026-10-13.
Exploitation prediction (EPSS)
1.51% probability of exploitation in the next 30 days (74% percentile) -- FIRST.org's EPSS model.
Federal remediation deadline
2026-10-16 (CISA KEV, Binding Operational Directive).

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftOutlook.com
MicrosoftWindows 11 Version 26H2
Microsoftoutlook
Microsoftwindows_11_26h2
Microsoftoutlook_web
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-96951
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-96951

KEV Required Action

FieldValue
KEV Linkhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog
Date Added to KEV2026-10-13
Required Action Due Date2026-10-16
Required ActionApply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85867/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85867

Key Details

CVECVE-2026-85867
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.24% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85867
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85867

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83845/ Microsoft Windows 11 (version 23H2) Authentication Bypass By Spoofing Rated 8.4 CVSS 2026-10-15T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Authentication Bypass By Spoofing Rated 8.4 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83845

Key Details

CVECVE-2026-83845
CVSS Score / Version
8.4 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
see table below
Classified as
CWE-290 (Authentication Bypass by Spoofing)
Exploitation prediction (EPSS)
0.29% probability of exploitation in the next 30 days (20% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83845
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83845

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-33924/ CVE-2026-33924 2026-10-29T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

CVE-2026-33924

Status: UPDATED  |  Advisory ID: CVE-2026-33924

Key Details

CVECVE-2026-33924
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Nozomi Networks Guardian and Nozomi Networks CMC
Classified as
CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'))

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Nozomi NetworksGuardian
Nozomi NetworksCMC
SubsystemsIndustrial Networking & Connectivity
SectorsMultiple

What to Know

Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that, when installed, causes arbitrary commands to be executed with root privileges, allowing the attacker to read or modify sensitive data, change the appliance configuration, or shut down the appliance. (NVD)

What to Do

Monitor Nozomi Networks's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-33924
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-33924

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-33923/ CVE-2026-33923 2026-10-29T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

CVE-2026-33923

Status: UPDATED  |  Advisory ID: CVE-2026-33923

Key Details

CVECVE-2026-33923
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Nozomi Networks Guardian and Nozomi Networks CMC
Classified as
CWE-347 (Improper Verification of Cryptographic Signature)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Nozomi NetworksGuardian
Nozomi NetworksCMC
SubsystemsIndustrial Networking & Connectivity
SectorsMultiple

What to Know

A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that passes signature verification but runs an unsigned script when the bundle is installed. The script runs with root privileges, allowing the attacker to read or modify sensitive data, change the appliance configuration, or shut down the appliance. (NVD)

What to Do

Monitor Nozomi Networks's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-33923
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-33923

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-5260/ Red Hat OpenShift AI 3.4 libgnutls Heap Overread Reachable by Unauthenticated Remote Attackers (CVSS 8.2) 2026-10-03T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Red Hat OpenShift AI 3.4 libgnutls Heap Overread Reachable by Unauthenticated Remote Attackers (CVSS 8.2)

Status: UPDATED  |  Advisory ID: CVE-2026-5260

Key Details

CVECVE-2026-5260
CVSS Score / Version
8.2 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-126 (Buffer Over-read)
Exploitation prediction (EPSS)
0.95% probability of exploitation in the next 30 days (60% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat OpenShift AI 3.4
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Update Infrastructure 5
Red HatRed Hat Hardened Images
Red HatRed Hat OpenShift Container Platform 4.12
Red HatRed Hat OpenShift Container Platform 4.13
Red HatRed Hat OpenShift Container Platform 4.14
Red HatRed Hat OpenShift Container Platform 4.16
Red HatRed Hat OpenShift Container Platform 4.17
Red HatRed Hat OpenShift Container Platform 4.18
Red HatRed Hat OpenShift Container Platform 4.19
Red HatRed Hat OpenShift Container Platform 4
Red HatCert Manager support for Red Hat OpenShift release 1.20
Red HatRed Hat Discovery 2
Red HatCert Manager support for Red Hat OpenShift release 1.17
Red HatCert Manager support for Red Hat OpenShift release 1.18
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a short heap overread. This memory corruption vulnerability could lead to information disclosure. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-5260
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-5260

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-42922/ CVE-2026-42922 2026-10-29T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

CVE-2026-42922

Status: UPDATED  |  Advisory ID: CVE-2026-42922

Key Details

CVECVE-2026-42922
CVSS Score / Version
9.8 (Critical) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
frangoteam Frangoteam
Classified as
CWE-285 (Improper Authorization)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
frangoteamFrangoteam
SubsystemsGeneral OT
SectorsMultiple

What to Know

A authorization bypass vulnerability exists in the /nodered functionality of FUXA (version(s): 1.3.2-2809). A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. (NVD)

What to Do

Monitor frangoteam's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-42922
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-42922

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-42013/ Red Hat OpenShift AI 3.4 gnutls Security Flaw Reachable by Unauthenticated Remote Attackers (CVSS 8.2) 2026-10-03T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Red Hat OpenShift AI 3.4 gnutls Security Flaw Reachable by Unauthenticated Remote Attackers (CVSS 8.2)

Status: UPDATED  |  Advisory ID: CVE-2026-42013

Key Details

CVECVE-2026-42013
CVSS Score / Version
8.2 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is high; availability impact is none.
Affected products
see table below
Classified as
CWE-295 (Improper Certificate Validation)
Exploitation prediction (EPSS)
0.56% probability of exploitation in the next 30 days (46% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat OpenShift AI 3.4
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Update Infrastructure 5
Red HatRed Hat Hardened Images
Red HatRed Hat OpenShift Container Platform 4.12
Red HatRed Hat OpenShift Container Platform 4.16
Red HatRed Hat OpenShift Container Platform 4.17
Red HatRed Hat OpenShift Container Platform 4.18
Red HatRed Hat OpenShift Container Platform 4.19
Red HatRed Hat OpenShift Container Platform 4
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatCert Manager support for Red Hat OpenShift release 1.20
Red HatRed Hat Discovery 2
Red HatCert Manager support for Red Hat OpenShift release 1.17
Red HatCert Manager support for Red Hat OpenShift release 1.18
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in gnutls. When validating certificates, an oversized Subject Alternative Name (SAN) could cause the validation process to incorrectly fall back to checking the Common Name (CN) field. This could allow a remote attacker to bypass proper certificate validation, potentially leading to spoofing or man-in-the-middle attacks. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-42013
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-42013

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-42012/ Red Hat OpenShift AI 3.4 gnutls Information Disclosure Reachable by Unauthenticated Remote Attackers (CVSS 7.1) 2026-10-03T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Red Hat OpenShift AI 3.4 gnutls Information Disclosure Reachable by Unauthenticated Remote Attackers (CVSS 7.1)

Status: UPDATED  |  Advisory ID: CVE-2026-42012

Key Details

CVECVE-2026-42012
CVSS Score / Version
7.1 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is low; integrity impact is high; availability impact is none.
Affected products
see table below
Classified as
CWE-295 (Improper Certificate Validation)
Exploitation prediction (EPSS)
0.49% probability of exploitation in the next 30 days (40% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat OpenShift AI 3.4
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Update Infrastructure 5
Red HatRed Hat Hardened Images
Red HatRed Hat OpenShift Container Platform 4
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatRed Hat Enterprise Linux 6
Red HatCert Manager support for Red Hat OpenShift release 1.20
Red HatRed Hat Discovery 2
Red HatCert Manager support for Red Hat OpenShift release 1.17
Red HatCert Manager support for Red Hat OpenShift release 1.18
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier (URI) or Service (SRV) Subject Alternative Names (SANs). This could cause the certificate validation process to incorrectly fall back to checking DNS hostnames against the Common Name (CN), potentially allowing the attacker to spoof legitimate services or intercept sensitive information. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-42012
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-42012

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-42011/ Red Hat OpenShift AI 3.4 gnutls Authorization Bypass Reachable by Unauthenticated Remote Attackers (CVSS 7.4) 2026-10-03T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Red Hat OpenShift AI 3.4 gnutls Authorization Bypass Reachable by Unauthenticated Remote Attackers (CVSS 7.4)

Status: UPDATED  |  Advisory ID: CVE-2026-42011

Key Details

CVECVE-2026-42011
CVSS Score / Version
7.4 (High) / CVSS v3.1
Updated2026-10-29
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
see table below
Classified as
CWE-295 (Improper Certificate Validation)
Exploitation prediction (EPSS)
0.47% probability of exploitation in the next 30 days (40% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat OpenShift AI 3.4
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Update Infrastructure 5
Red HatRed Hat Hardened Images
Red HatRed Hat OpenShift Container Platform 4.12
Red HatRed Hat OpenShift Container Platform 4.16
Red HatRed Hat OpenShift Container Platform 4.17
Red HatRed Hat OpenShift Container Platform 4.18
Red HatRed Hat OpenShift Container Platform 4.19
Red HatRed Hat OpenShift Container Platform 4
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatCert Manager support for Red Hat OpenShift release 1.20
Red HatRed Hat Discovery 2
Red HatCert Manager support for Red Hat OpenShift release 1.17
Red HatCert Manager support for Red Hat OpenShift release 1.18
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in gnutls. This vulnerability occurs because permitted name constraints were incorrectly ignored when previous Certificate Authorities (CAs) only had excluded name constraints. A remote attacker could exploit this to bypass critical name constraint checks during certificate validation. This bypass could lead to the acceptance of invalid certificates, potentially enabling spoofing or man-in-the-middle attacks against affected systems. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-42011
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-42011

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-72694/ MRTG PID File Symlink Following Lets Local Low-Privilege Attackers Redirect a Root-Started Daemon to Write Its Process ID to an Attacker-Chosen Path 2026-10-23T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

MRTG PID File Symlink Following Lets Local Low-Privilege Attackers Redirect a Root-Started Daemon to Write Its Process ID to an Attacker-Chosen Path

Status: UPDATED  |  Advisory ID: CVE-2026-72694

Key Details

CVECVE-2026-72694
CVSS Score / Version
7.1 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, and Red Hat Enterprise Linux 7
Classified as
CWE-59 (Improper Link Resolution Before File Access ('Link Following'))
Exploitation prediction (EPSS)
0.13% probability of exploitation in the next 30 days (2% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 7
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link (symlink) following vulnerability. By influencing or pre-placing a symlink in the process ID (PID) file path, the attacker can trick the root process into changing the ownership of an arbitrary existing file to the daemon user. This can lead to local privilege escalation, allowing unauthorized access to or modification of sensitive files. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-72694
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-72694

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-8401/ Firefox Profile Backup Sandbox Escape Scores CVSS 9.8 and Is Fixed in Firefox 150.0.3 and ESR 140.11 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Firefox Profile Backup Sandbox Escape Scores CVSS 9.8 and Is Fixed in Firefox 150.0.3 and ESR 140.11

Status: UPDATED  |  Advisory ID: CVE-2026-8401

Key Details

CVECVE-2026-8401
CVSS Score / Version
9.8 (Critical) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-693 (Protection Mechanism Failure)
Exploitation prediction (EPSS)
0.31% probability of exploitation in the next 30 days (24% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-8401
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-8401
Vendor advisoryhttps://www.mozilla.org/security/advisories/mfsa2026-45/

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-71456/ Johnson Controls Kantech Entrapass Hard-Coded Key Enables a Padding Oracle Attack Before Version 9.20 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Johnson Controls Kantech Entrapass Hard-Coded Key Enables a Padding Oracle Attack Before Version 9.20

Status: UPDATED  |  Advisory ID: CVE-2026-71456

Key Details

CVECVE-2026-71456
CVSS Score / Version
8.5 (High) / CVSS v4.0
Updated2026-10-26
Affected products
Johnson Controls Kantech Entrapass
Classified as
CWE-321 (Use of Hard-coded Cryptographic Key)
Exploitation prediction (EPSS)
0.10% probability of exploitation in the next 30 days (1% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Johnson ControlsKantech Entrapass
SubsystemsGeneral OT
SectorsMultiple

What to Know

Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack.

This issue affects Kantech Entrapass: before 9.20. (NVD)

What to Do

Monitor Johnson Controls's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-71456
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-71456
Vendor advisoryhttps://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-20293/ Cisco UCS UEFI Shell Exposes a Dangerous Function to Authenticated Users and Attackers With Physical Access 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Cisco UCS UEFI Shell Exposes a Dangerous Function to Authenticated Users and Attackers With Physical Access

Status: UPDATED  |  Advisory ID: CVE-2026-20293

Key Details

CVECVE-2026-20293
CVSS Score / Version
7.1 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
see table below
Classified as
CWE-749 (Exposed Dangerous Method or Function)
Exploitation prediction (EPSS)
0.18% probability of exploitation in the next 30 days (8% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
CiscoUnified Computing System (UCS)
CiscoUnified Computing System E-Series Software
CiscoCisco Unified Computing System (Standalone)
CiscoCisco Enterprise NFV Infrastructure Software
CiscoCisco Unified Computing System E-Series Software (UCSE)
Ciscoenterprise_nfv_infrastructure_software
CiscoCisco Unified Computing System (Managed)
SubsystemsIndustrial Networking & Connectivity
SectorsMulti-sector

What to Know

A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access to an affected device to bypass UEFI Secure Boot validation checks and execute unauthorized software.

This vulnerability is due to the availability of memory write commands in the UEFI Shell while UEFI Secure Boot is enabled on a device. An attacker could exploit this vulnerability by selecting the UEFI Shell boot option at boot time and using available shell commands to modify UEFI memory variables. A successful exploit could allow the attacker to manipulate the preboot environment, overwrite UEFI Secure Boot-related memory values, and execute unauthorized software on the affected device. (NVD)

What to Do

Monitor Cisco's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-20293
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-20293
Vendor advisoryhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-uefi-sb-bypass-eb6xC5GW

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-111459/ Moxa Remote Connect Suite Client Accepts Improper Certificates, Letting an On-Path Attacker Impersonate the Server 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Moxa Remote Connect Suite Client Accepts Improper Certificates, Letting an On-Path Attacker Impersonate the Server

Status: UPDATED  |  Advisory ID: CVE-2026-111459

Key Details

CVECVE-2026-111459
CVSS Score / Version
7.6 (High) / CVSS v4.0
Updated2026-10-27
Affected products
Moxa Remote Connect Suite (MRC Client)
Classified as
CWE-295 (Improper Certificate Validation)
Exploitation prediction (EPSS)
0.17% probability of exploitation in the next 30 days (7% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MoxaMoxa Remote Connect Suite (MRC Client)
SubsystemsGeneral OT
SectorsMultiple

What to Know

An improper certificate validation vulnerability exists in Moxa Remote Connect Suite (MRC Client). Under certain conditions, an unauthenticated attacker with on-path access to the communication between the MRC Client and its server could impersonate a trusted server and conduct a man-in-the-middle attack, potentially compromising the confidentiality and integrity of communications. (NVD)

What to Do

Monitor Moxa's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-111459
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-111459
Vendor advisoryhttps://www.moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-2026-111459-cve-2026-111460-cve-2026-111461-vulnerabilities-in-moxa-remote-connect-suite-mrc-client

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-34588/ OpenEXR internal_exr_undo_piz() Signed 32-Bit Pointer Arithmetic Causes an Out-of-Bounds Read 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

OpenEXR internal_exr_undo_piz() Signed 32-Bit Pointer Arithmetic Causes an Out-of-Bounds Read

Status: UPDATED  |  Advisory ID: CVE-2026-34588

Key Details

CVECVE-2026-34588
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.48% probability of exploitation in the next 30 days (41% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat AI Inference Server 3.3
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
openexropenexr
AcademySoftwareFoundationopenexr
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.1.0 to before 3.2.7, 3.3.9, and 3.4.9, internal_exr_undo_piz() advances the working wavelet pointer with signed 32-bit arithmetic. Because nx, ny, and wcount are int, a crafted EXR file can make this product overflow and wrap. The next channel then decodes from an incorrect address. The wavelet decode path operates in place, so this yields both out-of-bounds reads and out-of-bounds writes. This vulnerability is fixed in 3.2.7, 3.3.9, and 3.4.9. (NVD)

What to Do

Monitor Red Hat, openexr, and AcademySoftwareFoundation's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-34588
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-34588
Vendor advisoryhttps://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-588r-cr5c-w6hf

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44867/ AOS-8 and AOS-10 Web Interface Command Injection Lets an Authenticated Remote Attacker Run Commands on the Operating System 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-8 and AOS-10 Web Interface Command Injection Lets an Authenticated Remote Attacker Run Commands on the Operating System

Status: UPDATED  |  Advisory ID: CVE-2026-44867

Key Details

CVECVE-2026-44867
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection'))
Exploitation prediction (EPSS)
0.90% probability of exploitation in the next 30 days (59% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44867
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44867
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44860/ AOS-8 and AOS-10 Service Components Accept Crafted Parameters That Inject SQL for an Authenticated Administrator 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-8 and AOS-10 Service Components Accept Crafted Parameters That Inject SQL for an Authenticated Administrator

Status: UPDATED  |  Advisory ID: CVE-2026-44860

Key Details

CVECVE-2026-44860
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (24% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44860
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44860
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-111460/ Moxa OnCell G3150A-LTE Hard-Coded Key Lets Unauthenticated Attackers Impersonate Devices That Have Not Regenerated Keys 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Moxa OnCell G3150A-LTE Hard-Coded Key Lets Unauthenticated Attackers Impersonate Devices That Have Not Regenerated Keys

Status: UPDATED  |  Advisory ID: CVE-2026-111460

Key Details

CVECVE-2026-111460
CVSS Score / Version
7.7 (High) / CVSS v4.0
Updated2026-10-27
Affected products
Moxa OnCell G3150A-LTE Series
Classified as
CWE-321 (Use of Hard-coded Cryptographic Key)
Exploitation prediction (EPSS)
0.30% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MoxaOnCell G3150A-LTE Series
SubsystemsGeneral OT
SectorsMultiple

What to Know

A hard-coded cryptographic key vulnerability exists in the OnCell G3150A-LTE Series. Under certain conditions, an unauthenticated remote attacker could obtain shared cryptographic key material and use it to impersonate affected devices that have not regenerated their cryptographic keys, potentially compromising the confidentiality and integrity of management communications. (NVD)

What to Do

Monitor Moxa's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-111460
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-111460
Vendor advisoryhttps://www.moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-2026-111459-cve-2026-111460-cve-2026-111461-vulnerabilities-in-moxa-remote-connect-suite-mrc-client

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-40370/ SQL Server External File Path Control Lets an Authorized Attacker Execute Code Over a Network 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

SQL Server External File Path Control Lets an Authorized Attacker Execute Code Over a Network

Status: UPDATED  |  Advisory ID: CVE-2026-40370

Key Details

CVECVE-2026-40370
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-73 (External Control of File Name or Path)
Exploitation prediction (EPSS)
0.56% probability of exploitation in the next 30 days (46% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftSQL Server 2016
Microsoftsql_server_2019
Microsoftsql_server_2022
Microsoftsql_server_2025
MicrosoftMicrosoft SQL Server 2022 (GDR)
MicrosoftMicrosoft SQL Server 2025 for x64-based Systems (GDR)
MicrosoftMicrosoft SQL Server 2017 (CU 31)
MicrosoftMicrosoft SQL Server 2016 Service Pack 3 (GDR)
MicrosoftMicrosoft SQL Server 2016 Service Pack 3 Azure Connect Feature Pack
MicrosoftMicrosoft SQL Server 2022 for x64-based Systems (CU 24)
MicrosoftMicrosoft SQL Server 2025 (CU 4)
SubsystemsSupervisory Control & Operations Platforms
SectorsAll Sectors

What to Know

External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-40370
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-40370
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40370

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-6748/ Firefox and Thunderbird Web Codecs Uninitialized Memory Flaw Scores CVSS 9.8 and Is Fixed in Firefox 150 and ESR 140.10 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Firefox and Thunderbird Web Codecs Uninitialized Memory Flaw Scores CVSS 9.8 and Is Fixed in Firefox 150 and ESR 140.10

Status: UPDATED  |  Advisory ID: CVE-2026-6748

Key Details

CVECVE-2026-6748
CVSS Score / Version
9.8 (Critical) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-457 (Use of Uninitialized Variable)
Exploitation prediction (EPSS)
0.40% probability of exploitation in the next 30 days (34% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-6748
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-6748
Vendor advisoryhttps://www.mozilla.org/security/advisories/mfsa2026-30/

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-23827/ AOS-8 and AOS-10 Network Management Heap Overflow Lets an Unauthenticated Remote Attacker Run Code as a Privileged User 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-8 and AOS-10 Network Management Heap Overflow Lets an Unauthenticated Remote Attacker Run Code as a Privileged User

Status: UPDATED  |  Advisory ID: CVE-2026-23827

Key Details

CVECVE-2026-23827
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.53% probability of exploitation in the next 30 days (45% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

A heap-based buffer overflow vulnerability exists in a Network management service of AOS-8 and AOS-10 that could allow an unauthenticated remote attacker to achieve remote code execution. Successful exploitation could allow an unauthenticated attacker to execute arbitrary code as a privileged user on the underlying operating system, potentially leading to a system compromise. Exploitation may also result in a denial-of-service (DoS) condition affecting the impacted system process. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-23827
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-23827
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-41095/ Windows Data Deduplication Use-After-Free Lets an Authorized Local Attacker Elevate Privileges 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Data Deduplication Use-After-Free Lets an Authorized Local Attacker Elevate Privileges

Status: UPDATED  |  Advisory ID: CVE-2026-41095

Key Details

CVECVE-2026-41095
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.33% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows Server 2025
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2022 (version 23H2)
MicrosoftWindows Server 2022, 23H2 Edition (Server Core installation)
MicrosoftWindows Server 2012 R2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Data Deduplication allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-41095
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-41095
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41095

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-3872/ Keycloak Wildcard Redirect URIs Can Be Bypassed by an Attacker Controlling Another Path on the Same Server, Risking Access Token Theft 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Keycloak Wildcard Redirect URIs Can Be Bypassed by an Attacker Controlling Another Path on the Same Server, Risking Access Token Theft

Status: UPDATED  |  Advisory ID: CVE-2026-3872

Key Details

CVECVE-2026-3872
CVSS Score / Version
7.3 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is low; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
Red Hat Build of Keycloak, Red Hat build of Keycloak 26.2, and Red Hat build of Keycloak 26.4
Classified as
CWE-601 (URL Redirection to Untrusted Site ('Open Redirect'))
Exploitation prediction (EPSS)
0.44% probability of exploitation in the next 30 days (38% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Build of Keycloak
Red HatRed Hat build of Keycloak 26.2
Red HatRed Hat build of Keycloak 26.4
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in Keycloak. This issue allows an attacker, who controls another path on the same web server, to bypass the allowed path in redirect Uniform Resource Identifiers (URIs) that use a wildcard. A successful attack may lead to the theft of an access token, resulting in information disclosure. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-3872
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-3872
Vendor advisoryhttps://access.redhat.com/errata/RHSA-2026:6475

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-41605/ Apache Thrift Integer Overflow Is Fixed in Version 0.23.0 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Apache Thrift Integer Overflow Is Fixed in Version 0.23.0

Status: UPDATED  |  Advisory ID: CVE-2026-41605

Key Details

CVECVE-2026-41605
CVSS Score / Version
7.3 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is low; availability impact is low.
Affected products
see table below
Classified as
CWE-190 (Integer Overflow or Wraparound)
Exploitation prediction (EPSS)
0.93% probability of exploitation in the next 30 days (60% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat AI Inference Server
Red HatRed Hat Enterprise Linux AI (RHEL AI) 3
Red HatRed Hat OpenShift Container Platform 4
ApacheApache Thrift
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.14
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.15
Red HatMulticluster Global Hub 1.3.4
Red HatMulticluster Global Hub 1.4.5
Red HatMulticluster Global Hub 1.6.5
Red HatRed Hat multicluster global hub 1.5.3
Red HatRed Hat OpenShift distributed tracing 3.9.3
Red HatRed Hat OpenShift GitOps
Apachethrift
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Integer Overflow or Wraparound vulnerability in Apache Thrift.

This issue affects Apache Thrift: before 0.23.0.

Users are recommended to upgrade to version 0.23.0, which fixes the issue. (NVD)

What to Do

Monitor Red Hat's and Apache's web pages for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-41605
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-41605

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-42899/ ASP.NET Core Infinite Loop Lets an Unauthorized Network Attacker Deny Service 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

ASP.NET Core Infinite Loop Lets an Unauthorized Network Attacker Deny Service

Status: UPDATED  |  Advisory ID: CVE-2026-42899

Key Details

CVECVE-2026-42899
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
Exploitation prediction (EPSS)
2.43% probability of exploitation in the next 30 days (84% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Hardened Images
Microsoft.NET 10.0
Microsoft.NET 8.0
Microsoft.NET 9.0
Microsoft.net
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service over a network.

What to Do

Monitor Red Hat's and Microsoft's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-42899
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-42899
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42899

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-33793/ Junos Configuration Allowing Unsigned Python Op Scripts Lets a Low-Privilege Local User Gain Root 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Junos Configuration Allowing Unsigned Python Op Scripts Lets a Low-Privilege Local User Gain Root

Status: UPDATED  |  Advisory ID: CVE-2026-33793

Key Details

CVECVE-2026-33793
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
juniper junos, Juniper Networks Junos OS, juniper junos_os_evolved, and Juniper Networks Junos OS Evolved
Classified as
CWE-250 (Execution with Unnecessary Privileges)
Exploitation prediction (EPSS)
0.16% probability of exploitation in the next 30 days (5% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
juniperjunos
Juniper NetworksJunos OS
juniperjunos_os_evolved
Juniper NetworksJunos OS Evolved
SubsystemsGeneral OT
SectorsMultiple

What to Know

An Execution with Unnecessary Privileges vulnerability in the User Interface (UI) of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker to gain root privileges, thus compromising the system.

When a configuration that allows unsigned Python op scripts is present on the device, a non-root user is able to execute malicious op scripts as a root-equivalent user, leading to privilege escalation.

This issue affects Junos OS:

* All versions before 22.4R3-S7,

* from 23.2 before 23.2R2-S4,

* from 23.4 before 23.4R2-S6,

* from 24.2 before 24.2R1-S2, 24.2R2,

* from 24.4 before 24.4R1-S2, 24.4R2;

Junos OS Evolved:

* All versions before 22.4R3-S7-EVO,

* from 23.2 before 23.2R2-S4-EVO,

* from 23.4 before 23.4R2-S6-EVO,

* from 24.2 before 24.2R2-EVO,

* from 24.4 before 24.4R1-S1-EVO, 24.4R2-EVO. (NVD)

What to Do

Monitor juniper's and Juniper Networks's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-33793
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-33793
Vendor advisoryhttps://supportportal.juniper.net/JSA103142

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44853/ AOS-8 and AOS-10 Web Management Command Injection Can Let an Authenticated Attacker Upload Files Toward Remote Code Execution 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-8 and AOS-10 Web Management Command Injection Can Let an Authenticated Attacker Upload Files Toward Remote Code Execution

Status: UPDATED  |  Advisory ID: CVE-2026-44853

Key Details

CVECVE-2026-44853
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection'))
Exploitation prediction (EPSS)
1.01% probability of exploitation in the next 30 days (63% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to upload arbitrary files to the underlying operating system, potentially leading to remote code execution as a privileged user. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44853
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44853
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44863/ SQL Injection in AOS-8 and AOS-10 CLI and Management Protocol Components Is Open to Administrator-Level Attackers 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

SQL Injection in AOS-8 and AOS-10 CLI and Management Protocol Components Is Open to Administrator-Level Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-44863

Key Details

CVECVE-2026-44863
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (24% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44863
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44863
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-40192/ Pillow 10.3.0 Through 12.1.1 Reads Unlimited GZIP Data in FITS Images, Enabling a Decompression Bomb 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Pillow 10.3.0 Through 12.1.1 Reads Unlimited GZIP Data in FITS Images, Enabling a Decompression Bomb

Status: UPDATED  |  Advisory ID: CVE-2026-40192

Key Details

CVECVE-2026-40192
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-400 (Uncontrolled Resource Consumption)
Exploitation prediction (EPSS)
0.67% probability of exploitation in the next 30 days (52% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat AI Inference Server 3.3
Red HatRed Hat Ansible Automation Platform 2.6
Red HatRed Hat OpenShift AI 3.3
Red HatRed Hat AI Inference Server
Red HatRed Hat OpenShift AI (RHOAI)
Red HatRed Hat OpenShift AI 2.25
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Ansible Automation Platform 2.5 for RHEL 8
Red HatRed Hat Ansible Automation Platform 2.5 for RHEL 9
Red HatRed Hat Ansible Automation Platform 2.6 for RHEL 9
Red HatRed Hat Quay 3.10
Red HatRed Hat Quay 3.12
Red HatRed Hat Quay 3.14
Red HatRed Hat Quay 3.15
Red HatRed Hat Quay 3.16
Red HatRed Hat Quay 3.17
Red HatRed Hat Quay 3.9
Red HatRed Hat Ansible Automation Platform 2
Red HatRed Hat AI Inference Server 3.2
Red HatRed Hat Satellite 6.16 for RHEL 8
Red HatRed Hat Satellite 6.16 for RHEL 9
Red HatRed Hat Satellite 6.17 for RHEL 9
Red HatRed Hat Satellite 6.18 for RHEL 9
Red HatRed Hat Satellite 6.19 for RHEL 9
Red HatRed Hat Enterprise Linux AI 3.3
pythonpillow
python-pillowPillow
Red HatRed Hat AI Inference Server 3.4
Red HatLightspeed Core
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks. A specially crafted FITS file could cause unbounded memory consumption, leading to denial of service (OOM crash or severe performance degradation). If users are unable to immediately upgrade, they should only open specific image formats, excluding FITS, as a workaround. (NVD)

What to Do

Monitor Red Hat, python, and python-pillow's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-40192
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-40192
Vendor advisoryhttps://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-21916/ Junos OS CLI Symlink Following Lets a Low-Privilege Local User Escalate to Root 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Junos OS CLI Symlink Following Lets a Low-Privilege Local User Escalate to Root

Status: UPDATED  |  Advisory ID: CVE-2026-21916

Key Details

CVECVE-2026-21916
CVSS Score / Version
7.3 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
juniper junos and Juniper Networks Junos OS
Classified as
CWE-61 (UNIX Symbolic Link (Symlink) Following)
Exploitation prediction (EPSS)
0.13% probability of exploitation in the next 30 days (3% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
juniperjunos
Juniper NetworksJunos OS
SubsystemsGeneral OT
SectorsMultiple

What to Know

A UNIX Symbolic Link (Symlink) Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate their privileges to root which will lead to a complete compromise of the system.

When after a user has performed a specific 'file link ...' CLI operation, another user commits (unrelated configuration changes), the first user can login as root.

This issue affects Junos OS:

* all versions before 23.2R2-S7,

* 23.4 versions before 23.4R2-S6,

* 24.2 versions before 24.2R2-S3,

* 24.4 versions before 24.4R2-S2,

* 25.2 versions before 25.2R2.

This issue does not affect versions 25.4R1 or later. (NVD)

What to Do

Monitor juniper's and Juniper Networks's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-21916
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-21916
Vendor advisoryhttps://kb.juniper.net/JSA107807

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-23821/ AOS-10 Access Point Configuration Processing Flaw Lets an Authenticated Attacker Run System Commands 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-10 Access Point Configuration Processing Flaw Lets an Authenticated Attacker Run System Commands

Status: UPDATED  |  Advisory ID: CVE-2026-23821

Key Details

CVECVE-2026-23821
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos and Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
Classified as
CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'))
Exploitation prediction (EPSS)
0.62% probability of exploitation in the next 30 days (49% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
Hewlett Packard Enterprise (HPE)ArubaOS (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

A vulnerability in the configuration processing logic of Access Points running AOS-10 could allow an authenticated remote attacker to execute system commands under certain pre-existing conditions. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

Note: Access Points running AOS-8 Instant software are not affected by this vulnerability. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-23821
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-23821
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05049en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-34856/ HarmonyOS Communication Module Use-After-Free Race Condition Can Affect Availability 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

HarmonyOS Communication Module Use-After-Free Race Condition Can Affect Availability

Status: UPDATED  |  Advisory ID: CVE-2026-34856

Key Details

CVECVE-2026-34856
CVSS Score / Version
7.3 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is low; availability impact is high.
Affected products
huawei harmonyos
Classified as
CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
Exploitation prediction (EPSS)
0.13% probability of exploitation in the next 30 days (3% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
huaweiharmonyos
SubsystemsGeneral OT
SectorsMultiple

What to Know

UAF vulnerability in the communication module.

Impact: Successful exploitation of this vulnerability may affect availability. (NVD)

What to Do

Monitor huawei's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-34856
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-34856
Vendor advisoryhttps://consumer.huawei.com/en/support/bulletin/2026/4/

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-28905/ WebKit Buffer Bounds Flaw Fixed in Safari 26.5 Crashes the Process on Malicious Web Content 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

WebKit Buffer Bounds Flaw Fixed in Safari 26.5 Crashes the Process on Malicious Web Content

Status: UPDATED  |  Advisory ID: CVE-2026-28905

Key Details

CVECVE-2026-28905
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is none.
Affected products
see table below
Classified as
CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Exploitation prediction (EPSS)
0.41% probability of exploitation in the next 30 days (35% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-28905
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-28905
Vendor advisoryhttps://support.apple.com/en-us/127110

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-28847/ Safari 26.5 Fixes a Memory-Handling Flaw That Crafted Web Content Can Use to Crash the Process 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Safari 26.5 Fixes a Memory-Handling Flaw That Crafted Web Content Can Use to Crash the Process

Status: UPDATED  |  Advisory ID: CVE-2026-28847

Key Details

CVECVE-2026-28847
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Exploitation prediction (EPSS)
0.60% probability of exploitation in the next 30 days (49% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-28847
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-28847
Vendor advisoryhttps://support.apple.com/en-us/127110

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-33797/ A Genuine BGP Packet From an Adjacent Attacker Can Reset a Junos BGP Session 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

A Genuine BGP Packet From an Adjacent Attacker Can Reset a Junos BGP Session

Status: UPDATED  |  Advisory ID: CVE-2026-33797

Key Details

CVECVE-2026-33797
CVSS Score / Version
7.4 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS Prose
attack vector is adjacent; attack complexity is low; privileges required is none; user interaction is none; scope is changed; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
juniper junos, Juniper Networks Junos OS, juniper junos_os_evolved, and Juniper Networks Junos OS Evolved
Classified as
CWE-20 (Improper Input Validation)
Exploitation prediction (EPSS)
0.17% probability of exploitation in the next 30 days (6% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
juniperjunos
Juniper NetworksJunos OS
juniperjunos_os_evolved
Juniper NetworksJunos OS Evolved
SubsystemsGeneral OT
SectorsMultiple

What to Know

An Improper Input Validation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker, sending a specific genuine BGP packet in an already established BGP session to reset only that session causing a Denial of Service (DoS).

An attacker repeatedly sending the packet will sustain the Denial of Service (DoS).This issue affects Junos OS:

* 25.2 versions before 25.2R2

This issue does not affect Junos OS versions before 25.2R1.

This issue affects Junos OS Evolved:

* 25.2-EVO versions before 25.2R2-EVO

This issue does not affect Junos OS Evolved versions before 25.2R1-EVO.

eBGP and iBGP are affected.

IPv4 and IPv6 are affected. (NVD)

What to Do

Monitor juniper's and Juniper Networks's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-33797
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-33797
Vendor advisoryhttps://kb.juniper.net/JSA107850

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-23826/ AOS-8 Network Management Service Flaw Lets Unauthenticated Packets Cause Denial of Service on Aruba Devices 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-8 Network Management Service Flaw Lets Unauthenticated Packets Cause Denial of Service on Aruba Devices

Status: UPDATED  |  Advisory ID: CVE-2026-23826

Key Details

CVECVE-2026-23826
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-770 (Allocation of Resources Without Limits or Throttling)
Exploitation prediction (EPSS)
0.40% probability of exploitation in the next 30 days (34% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

A vulnerability in a network management service of AOS-8 Operating System could allow an unauthenticated remote attacker to exploit this vulnerability by sending specially crafted network packets to the affected device, potentially resulting in a denial-of-service condition. Successful exploitation could cause the affected service process to terminate unexpectedly, disrupting normal device operations. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-23826
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-23826
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-34003/ X.Org XKB Key Types Request Flaw Lets a Local Attacker Trigger Out-of-Bounds Memory Access 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

X.Org XKB Key Types Request Flaw Lets a Local Attacker Trigger Out-of-Bounds Memory Access

Status: UPDATED  |  Advisory ID: CVE-2026-34003

Key Details

CVECVE-2026-34003
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (16% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatRed Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in the X.Org X server's XKB key types request validation. A local attacker could send a specially crafted request to the X server, leading to an out-of-bounds memory access vulnerability. This could result in the disclosure of sensitive information or cause the server to crash, leading to a Denial of Service (DoS). In certain configurations, higher impact outcomes may be possible. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-34003
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-34003

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-35092/ Corosync Join Message Integer Overflow Lets Unauthenticated UDP Packets Crash the Service 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Corosync Join Message Integer Overflow Lets Unauthenticated UDP Packets Crash the Service

Status: UPDATED  |  Advisory ID: CVE-2026-35092

Key Details

CVECVE-2026-35092
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-190 (Integer Overflow or Wraparound)
Exploitation prediction (EPSS)
0.99% probability of exploitation in the next 30 days (63% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatEnterprise Linux
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
corosynccorosync
Red Hatopenshift
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode. (NVD)

What to Do

Monitor Red Hat's and corosync's web pages for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-35092
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-35092

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-41021/ Eaton easyE4 Weak Password Policy Opens Offline Guessing Once a Hash Is Obtained, Including Through CVE-2026-41020 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Eaton easyE4 Weak Password Policy Opens Offline Guessing Once a Hash Is Obtained, Including Through CVE-2026-41020

Status: UPDATED  |  Advisory ID: CVE-2026-41021

Key Details

CVECVE-2026-41021
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-27
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Eaton easyE4
Classified as
CWE-521 (Weak Password Requirements)
Exploitation prediction (EPSS)
0.18% probability of exploitation in the next 30 days (8% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
EatoneasyE4
SubsystemsGeneral OT
SectorsMultiple

What to Know

Eaton easyE4 uses an insufficiently strong password policy. An attacker who obtains a password hash, including through CVE-2026-41020, could perform an offline password-guessing attack and potentially recover user credentials. (NVD)

What to Do

Monitor Eaton's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-41021
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-41021

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-35091/ Corosync Membership Token Check Returns the Wrong Value, Letting Unauthenticated UDP Packets Trigger an Out-of-Bounds Read 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Corosync Membership Token Check Returns the Wrong Value, Letting Unauthenticated UDP Packets Trigger an Out-of-Bounds Read

Status: UPDATED  |  Advisory ID: CVE-2026-35091

Key Details

CVECVE-2026-35091
CVSS Score / Version
8.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-253 (Incorrect Check of Function Return Value)
Exploitation prediction (EPSS)
0.87% probability of exploitation in the next 30 days (59% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatEnterprise Linux
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
corosynccorosync
Red Hatopenshift
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents (NVD)

What to Do

Monitor Red Hat's and corosync's web pages for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-35091
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-35091

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-33788/ Junos OS Evolved PTX Series Flaw Gives a Low-Privilege Local User Direct Access to Installed FPCs 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Junos OS Evolved PTX Series Flaw Gives a Low-Privilege Local User Direct Access to Installed FPCs

Status: UPDATED  |  Advisory ID: CVE-2026-33788

Key Details

CVECVE-2026-33788
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
juniper junos_os_evolved and Juniper Networks Junos OS Evolved
Classified as
CWE-306 (Missing Authentication for Critical Function)
Exploitation prediction (EPSS)
0.11% probability of exploitation in the next 30 days (2% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
juniperjunos_os_evolved
Juniper NetworksJunos OS Evolved
SubsystemsGeneral OT
SectorsMultiple

What to Know

A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators (FPCs) of Juniper Networks Junos OS Evolved on PTX Series allows a local, authenticated attacker with low privileges to gain direct access to FPCs installed in the device.

A local user with low privileges can gain direct access to the installed FPCs as a high privileged user, which can potentially lead to a full compromise of the affected component.

This issue affects Junos OS Evolved on PTX10004, PTX10008, PTX100016, with JNP10K-LC1201 or JNP10K-LC1202:

* All versions before 21.2R3-S8-EVO,

* 21.4-EVO versions before 21.4R3-S7-EVO,

* 22.2-EVO versions before 22.2R3-S4-EVO,

* 22.3-EVO versions before 22.3R3-S3-EVO,

* 22.4-EVO versions before 22.4R3-S2-EVO,

* 23.2-EVO versions before 23.2R2-EVO. (NVD)

What to Do

Monitor juniper's and Juniper Networks's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-33788
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-33788
Vendor advisoryhttps://kb.juniper.net/JSA107806

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-4786/ Incomplete Fix for CVE-2026-4519 Leaves Python webbrowser.open() Open to Shell Command Injection Through %action URLs 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Incomplete Fix for CVE-2026-4519 Leaves Python webbrowser.open() Open to Shell Command Injection Through %action URLs

Status: UPDATED  |  Advisory ID: CVE-2026-4786

Key Details

CVECVE-2026-4786
CVSS Score / Version
7.1 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is low.
Affected products
see table below
Classified as
CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection'))
Exploitation prediction (EPSS)
0.29% probability of exploitation in the next 30 days (22% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat AI Inference Server 3.3
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Update Infrastructure 5
Red HatRed Hat Hardened Images
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatRed Hat AI Inference Server 3.2
Red HatRed Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
Red HatRHEL-8 based Middleware Containers
Red HatRed Hat Enterprise Linux AI 3.3
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
Python Software FoundationCPython
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Mitgation of CVE-2026-4519 was incomplete. If the URL contained "%action" the mitigation could be bypassed for certain browser types the "webbrowser.open()" API could have commands injected into the underlying shell. See CVE-2026-4519 for details. (NVD)

What to Do

Monitor Red Hat's and Python Software Foundation's web pages for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-4786
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-4786

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-41082/ OCaml opam Before 2.5.1 Lets a .install Destination Path Use ../ to Escape Its Directory 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

OCaml opam Before 2.5.1 Lets a .install Destination Path Use ../ to Escape Its Directory

Status: UPDATED  |  Advisory ID: CVE-2026-41082

Key Details

CVECVE-2026-41082
CVSS Score / Version
7.3 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
CVSS Prose
attack vector is local; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is high; availability impact is low.
Affected products
Red Hat Enterprise Linux, Red Hat Enterprise Linux 10, and ocaml opam
Classified as
CWE-24 (Path Traversal: '../filedir')
Exploitation prediction (EPSS)
0.21% probability of exploitation in the next 30 days (10% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatEnterprise Linux
Red HatRed Hat Enterprise Linux 10
ocamlopam
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.

What to Do

Monitor Red Hat's and ocaml's web pages for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-41082
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-41082

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-42587/ Netty's HttpContentDecompressor Skips Its Allocation Limit for Some Encodings, Opening a Decompression Bomb Path 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Netty's HttpContentDecompressor Skips Its Allocation Limit for Some Encodings, Opening a Decompression Bomb Path

Status: UPDATED  |  Advisory ID: CVE-2026-42587

Key Details

CVECVE-2026-42587
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-400 (Uncontrolled Resource Consumption)
Exploitation prediction (EPSS)
0.99% probability of exploitation in the next 30 days (62% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat OpenShift AI 2.25
Red HatRed Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Red HatRed Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8
Red HatRed Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 9
Red HatRed Hat JBoss Enterprise Application Platform Expansion Pack
Red HatRed Hat Single Sign-On 7
Red HatRed Hat build of Apicurio Registry 3
Red HatRed Hat build of Debezium 3
Red HatRed Hat Build of Keycloak
Red HatRed Hat Process Automation 7
Red HatRed Hat AMQ Clients
Red HatRed Hat Fuse 7
Red HatRed Hat JBoss Enterprise Application Platform 8.1.7.GA
Red HatRed Hat OpenShift Dev Spaces 3.28
Red Hatstreams for Apache Kafka 2
Red HatRed Hat build of Apicurio Registry 2
Red HatCryostat 4 on RHEL 9
Red HatRed Hat OpenShift Dev Spaces 3.29
Red HatOpenShift Serverless
Red HatStreams for Apache Kafka 3.2.1
nettynetty
io.nettynetty-codec-http
Red HatRed Hat AMQ Broker 7.13.6
Red HatRed Hat AMQ Broker 7.14.1
Red HatRed Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16
Red HatRed Hat build of Quarkus 3.27.4
Red HatRed Hat build of OptaPlanner 8
io.nettynetty-codec-http2
Red HatRed Hat Data Grid 8.6.2
Red HatRed Hat JBoss Enterprise Application Platform 8.1
Red HatStreams for Apache Kafka 2.9.4
Red HatCryostat 4
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpContentDecompressor accepts a maxAllocation parameter to limit decompression buffer size and prevent decompression bomb attacks. This limit is correctly enforced for gzip and deflate encodings via ZlibDecoder, but is silently ignored when the content encoding is br (Brotli), zstd, or snappy. An attacker can bypass the configured decompression limit by sending a compressed payload with Content-Encoding: br instead of Content-Encoding: gzip, causing unbounded memory allocation and out-of-memory denial of service. The same vulnerability exists in DelegatingDecompressorFrameListener for HTTP/2 connections. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final. (NVD)

What to Do

Monitor Red Hat, netty, and io.netty's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-42587
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-42587
Vendor advisoryhttps://github.com/netty/netty/security/advisories/GHSA-f6hv-jmp6-3vwv

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-23818/ HPE Aruba Private 5G Core Login Open Redirect Can Send an Authenticated User to an Attacker-Chosen Site 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

HPE Aruba Private 5G Core Login Open Redirect Can Send an Authenticated User to an Attacker-Chosen Site

Status: UPDATED  |  Advisory ID: CVE-2026-23818

Key Details

CVECVE-2026-23818
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
hpe aruba_networking_private_5g_core and Hewlett Packard Enterprise (HPE) Private 5G Core
Classified as
CWE-601 (URL Redirection to Untrusted Site ('Open Redirect'))
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (25% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
hpearuba_networking_private_5g_core
Hewlett Packard Enterprise (HPE)Private 5G Core
SubsystemsGeneral OT
SectorsMultiple

What to Know

A vulnerability has been identified in the graphical user interface (GUI) of HPE Aruba Networking Private 5G Core On-Prem that could allow an attacker to abuse an open redirect vulnerability in the login flow using a crafted URL. Successful exploitation may redirect an authenticated user to an attacker-controlled server hosting a spoofed login page prompting the unsuspecting victim to give away their credentials, which could then be captured by the attacker, before being redirected back to the legitimate login page. (NVD)

What to Do

Monitor hpe's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-23818
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-23818
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05032en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-34332/ Windows Kernel-Mode Driver Use-After-Free Lets an Authorized Attacker Execute Code Over a Network on Windows Server 2025 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Kernel-Mode Driver Use-After-Free Lets an Authorized Attacker Execute Code Over a Network on Windows Server 2025

Status: UPDATED  |  Advisory ID: CVE-2026-34332

Key Details

CVECVE-2026-34332
CVSS Score / Version
8.0 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is low; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows Server 2025
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.51% probability of exploitation in the next 30 days (43% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows Server 2025
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-34332
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-34332
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-34332

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-34001/ X.Org Server XSYNC Fence Use-After-Free in miSyncTriggerFence() Crashes the Server for an Attacker With X11 Access 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

X.Org Server XSYNC Fence Use-After-Free in miSyncTriggerFence() Crashes the Server for an Attacker With X11 Access

Status: UPDATED  |  Advisory ID: CVE-2026-34001

Key Details

CVECVE-2026-34001
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-825 (Expired Pointer Dereference)
Exploitation prediction (EPSS)
0.26% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatRed Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in the X.Org X server. This use-after-free vulnerability occurs in the XSYNC fence triggering logic, specifically within the miSyncTriggerFence() function. An attacker with access to the X11 server can exploit this without user interaction, leading to a server crash and potentially enabling memory corruption. This could result in a denial of service or further compromise of the system. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-34001
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-34001

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-0204/ SonicOS Access Control Flaw May Expose Management Interface Functions Under Specific Conditions 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

SonicOS Access Control Flaw May Expose Management Interface Functions Under Specific Conditions

Status: UPDATED  |  Advisory ID: CVE-2026-0204

Key Details

CVECVE-2026-0204
CVSS Score / Version
8.0 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is adjacent; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
SonicWall sonicos
Classified as
CWE-306 (Missing Authentication for Critical Function)
Exploitation prediction (EPSS)
0.38% probability of exploitation in the next 30 days (32% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
SonicWallsonicos
SubsystemsGeneral OT
SectorsMultiple

What to Know

A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.

What to Do

Monitor SonicWall's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-0204
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-0204
Vendor advisoryhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0004

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-10756/ Hitachi Energy TRO600 Port Forwarding Lets an Authenticated Attacker Reach Services Meant Only for Localhost 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Hitachi Energy TRO600 Port Forwarding Lets an Authenticated Attacker Reach Services Meant Only for Localhost

Status: UPDATED  |  Advisory ID: CVE-2026-10756

Key Details

CVECVE-2026-10756
CVSS Score / Version
7.7 (High) / CVSS v4.0
Updated2026-10-27
Affected products
Hitachi Energy TRO600 Series Firmware
Classified as
CWE-923 (Improper Restriction of Communication Channel to Intended Endpoints)
Exploitation prediction (EPSS)
0.18% probability of exploitation in the next 30 days (8% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Hitachi EnergyTRO600 Series Firmware
SubsystemsGeneral OT
SectorsMultiple

What to Know

TRO600 contains a vulnerability that allows an authenticated attacker to bypass network access restrictions and access services intended to be reachable only from localhost. By leveraging port forwarding, an attacker can interact with locally bound ports and services, resulting in unauthorized access to sensitive functionality and confidential information, and causing availability impact. (NVD)

What to Do

Monitor Hitachi Energy's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-10756
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-10756

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-28883/ A WebKit Use-After-Free Fixed in Safari 26.5 Can Crash the Process on Maliciously Crafted Web Content 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

A WebKit Use-After-Free Fixed in Safari 26.5 Can Crash the Process on Maliciously Crafted Web Content

Status: UPDATED  |  Advisory ID: CVE-2026-28883

Key Details

CVECVE-2026-28883
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is none.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.40% probability of exploitation in the next 30 days (34% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-28883
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-28883
Vendor advisoryhttps://support.apple.com/en-us/127110

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-32203/ .NET and Visual Studio Stack Overflow Lets an Unauthorized Network Attacker Deny Service 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

.NET and Visual Studio Stack Overflow Lets an Unauthorized Network Attacker Deny Service

Status: UPDATED  |  Advisory ID: CVE-2026-32203

Key Details

CVECVE-2026-32203
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-20 (Improper Input Validation)
Exploitation prediction (EPSS)
1.90% probability of exploitation in the next 30 days (80% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Hardened Images
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
Microsoft.NET 10.0
Microsoft.NET 8.0
Microsoft.NET 9.0
MicrosoftMicrosoft Visual Studio 2022 version 17.14
Microsoft.net
Microsoftvisual_studio_2022
Microsoftvisual_studio_2026
MicrosoftMicrosoft Visual Studio 2022 version 17.12
MicrosoftMicrosoft Visual Studio 2026 version 18.4
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Stack-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to deny service over a network.

What to Do

Monitor Red Hat's and Microsoft's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-32203
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-32203
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32203

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-4282/ Keycloak's SingleUseObjectProvider Lacks Namespace Isolation, Letting Unauthenticated Attackers Forge Authorization Codes 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Keycloak's SingleUseObjectProvider Lacks Namespace Isolation, Letting Unauthenticated Attackers Forge Authorization Codes

Status: UPDATED  |  Advisory ID: CVE-2026-4282

Key Details

CVECVE-2026-4282
CVSS Score / Version
7.4 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
Red Hat Build of Keycloak, Red Hat build of Keycloak 26.2, and Red Hat build of Keycloak 26.4
Classified as
CWE-653 (Improper Isolation or Compartmentalization)
Exploitation prediction (EPSS)
0.43% probability of exploitation in the next 30 days (37% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Build of Keycloak
Red HatRed Hat build of Keycloak 26.2
Red HatRed Hat build of Keycloak 26.4
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in Keycloak. The SingleUseObjectProvider, a global key-value store, lacks proper type and namespace isolation. This vulnerability allows an unauthenticated attacker to forge authorization codes. Successful exploitation can lead to the creation of admin-capable access tokens, resulting in privilege escalation. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-4282
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-4282
Vendor advisoryhttps://access.redhat.com/errata/RHSA-2026:6475

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-6918/ A 32-Byte Crafted TCP Message Crashes Eclipse OpenJ9 JITServer Without Authentication 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

A 32-Byte Crafted TCP Message Crashes Eclipse OpenJ9 JITServer Without Authentication

Status: UPDATED  |  Advisory ID: CVE-2026-6918

Key Details

CVECVE-2026-6918
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 10.2 Extended Update Support, eclipse openj9, and Eclipse OpenJ9
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.52% probability of exploitation in the next 30 days (44% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 10.2 Extended Update Support
eclipseopenj9
eclipseEclipse OpenJ9
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message.

What to Do

Monitor Red Hat's and eclipse's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-6918
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-6918
Vendor advisoryhttps://github.com/eclipse-openj9/openj9/security/advisories/GHSA-q393-vr4c-969r

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-98117/ Linux Kernel cachefiles Trace Call Passes a Pointer That Can Trigger a Use-After-Free 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Linux Kernel cachefiles Trace Call Passes a Pointer That Can Trigger a Use-After-Free

Status: UPDATED  |  Advisory ID: CVE-2026-98117

Key Details

CVECVE-2026-98117
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Linux Kernel
Classified as
CWE-416 (Use After Free)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
LinuxLinux Kernel
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

In the Linux kernel, the following vulnerability has been resolved:

cachefiles: Fix potential UAF/KASAN warning

Currently, trace_cachefiles_coherency() is being passed a pointer to a

__be64 lain over the coherency data in struct cachefiles_xattr so that it

can display the first 8 bytes. However, the data is of variable length and

could even be 0 bytes. This could lead to a UAF or KASAN warning.

Fix this by making sure the buffer has room for at least 8 bytes and that

those 8 bytes are pre-cleared.

Further, those bytes are not 8-byte aligned, so fix the tracepoint to

extract the data as four 2-byte words (they are 2-byte aligned) and

reassemble the __be64. The compiler will convert this into a single 8-byte

load where the CPU supports it. (NVD)

What to Do

Monitor Linux's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-98117
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-98117

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-98118/ Linux Kernel netfs Readahead Race Between the App and Collector Threads Is Fixed by Loading All Folios Upfront 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Linux Kernel netfs Readahead Race Between the App and Collector Threads Is Fixed by Loading All Folios Upfront

Status: UPDATED  |  Advisory ID: CVE-2026-98118

Key Details

CVECVE-2026-98118
CVSS Score / Version
7.1 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is high.
Affected products
Linux Kernel
Classified as
CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
LinuxLinux Kernel
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix readahead synchronisation issues by loading all folios upfront

There are some synchronisation issues that derive from the app thread

adding more folios to the rolling buffer whilst the collector thread is

looking at them or trying to clear them, such as determining the setting of

front_folio_order when the next folio hasn't been added yet,

The reason for the rolling buffer approach is that loading the buffer

upfront and then dropping all the refs just acquired is quite a slow

operation, and loading progressively allows some of the cost to be deferred

until after at least some of the I/O is started.

Instead, a better way is to load all the folios into the rolling buffer

upfront - and then drop the refs later, once the I/O is in progress. (Even

better would be for the refs not to be there at all.)

Fix this by changing the rolling buffer loader to load all the folios

selected by the VM for readahead upfront into the folio queue. The folio

queue is allocated a batch worth at a time as we don't know how many folios

are involved (the readahead_control struct, alas, has a page count, not a

folio count).

The folio refs acquired from readahead are then dropped in bulk once the

first subrequest is dispatched as it's quite a slow operation. The

collector waits for NETFS_RREQ_NEED_PUT_RA_REFS to be cleared so that it

doesn't unlock folios before the xarray has been scanned for them.

This simplifies the buffer handling later and isn't noticeably slower as

the xarray doesn't need to be modified and the folios are all already

pre-locked. (NVD)

What to Do

Monitor Linux's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-98118
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-98118

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-87103/ Acronis Cyber Protect 17 on Linux and Windows Accepts Improperly Validated Tokens Until Build 42587 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Acronis Cyber Protect 17 on Linux and Windows Accepts Improperly Validated Tokens Until Build 42587

Status: UPDATED  |  Advisory ID: CVE-2026-87103

Key Details

CVECVE-2026-87103
CVSS Score / Version
7.4 (High) / CVSS v3.0
Updated2026-10-28
CVSS Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
Acronis Cyber Protect 17
Classified as
CWE-347 (Improper Verification of Cryptographic Signature)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
AcronisAcronis Cyber Protect 17
SubsystemsGeneral OT
SectorsMultiple

What to Know

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587. (NVD)

What to Do

Monitor Acronis's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-87103
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-87103

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2025-30414/ Acronis Cyber Protect Agent for Windows Authentication Flaw Enables Local Privilege Escalation Before Build 42569 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Acronis Cyber Protect Agent for Windows Authentication Flaw Enables Local Privilege Escalation Before Build 42569

Status: UPDATED  |  Advisory ID: CVE-2025-30414

Key Details

CVECVE-2025-30414
CVSS Score / Version
7.1 (High) / CVSS v3.0
Updated2026-10-28
CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
Acronis Cyber Protect Cloud Agent and Acronis Cyber Protect 17
Classified as
CWE-1390 (Weak Authentication)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
AcronisAcronis Cyber Protect Cloud Agent
AcronisAcronis Cyber Protect 17
SubsystemsGeneral OT
SectorsMultiple

What to Know

Local privilege escalation due to improper authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 42569, Acronis Cyber Protect 17 (Windows) before build 42587. (NVD)

What to Do

Monitor Acronis's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-30414
CVEhttps://www.cve.org/CVERecord?id=CVE-2025-30414

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-87102/ Acronis Cyber Protect 17 Improper Token Validation Allows Information Disclosure and Manipulation Before Build 42587 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Acronis Cyber Protect 17 Improper Token Validation Allows Information Disclosure and Manipulation Before Build 42587

Status: UPDATED  |  Advisory ID: CVE-2026-87102

Key Details

CVECVE-2026-87102
CVSS Score / Version
7.4 (High) / CVSS v3.0
Updated2026-10-28
CVSS Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
Acronis Cyber Protect 17
Classified as
CWE-347 (Improper Verification of Cryptographic Signature)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
AcronisAcronis Cyber Protect 17
SubsystemsGeneral OT
SectorsMultiple

What to Know

Sensitive information disclosure and manipulation due to improper token validation. The following products are affected: Acronis Cyber Protect 17 (Linux, Windows) before build 42587. (NVD)

What to Do

Monitor Acronis's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-87102
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-87102

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2023-31316/ AMD Secure Processor Power Save/Restore Flaw Could Let an Attacker Redirect Video Core Next Firmware Execution 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AMD Secure Processor Power Save/Restore Flaw Could Let an Attacker Redirect Video Core Next Firmware Execution

Status: UPDATED  |  Advisory ID: CVE-2023-31316

Key Details

CVECVE-2023-31316
CVSS Score / Version
7.1 (High) / CVSS v4.0
Updated2026-10-28
Affected products
see table below
Classified as
CWE-1304 (Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
AMDAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
AMDAMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
AMDAMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
AMDAMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
AMDAMD Ryzen™ 7000 Series Desktop Processors
AMDAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
AMDAMD Ryzen™ 4000 Series Desktop Processors
AMDAMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
AMDAMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
AMDAMD Ryzen™ Embedded V2000 Series Processors
AMDAMD Instinct™ MI250
AMDAMD Instinct™ MI210
AMDAMD Radeon™ PRO V620
AMDAMD Radeon™ RX 7000 Series Graphics Products
AMDAMD Radeon™ PRO W7000 Series Graphics Products
AMDAMD Radeon™ RX 6000 Series Graphics Products
AMDAMD Radeon™ PRO W6000 Series Graphics Products
AMDAMD Ryzen™ Embedded V3000 Series Processors
SubsystemsGeneral OT
SectorsMultiple

What to Know

Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker with the ability to write outside the trusted memory range (TMR) to change the execution flow of the Video Core Next (VCN) firmware potentially impacting confidentiality, integrity, or availability.

What to Do

Monitor AMD's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2023-31316
CVEhttps://www.cve.org/CVERecord?id=CVE-2023-31316

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-0259/ Palo Alto Networks WildFire WF-500 Arbitrary File Read and Delete Affects Appliances in Default Non-FIPS Mode 2026-09-24T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Palo Alto Networks WildFire WF-500 Arbitrary File Read and Delete Affects Appliances in Default Non-FIPS Mode

Status: UPDATED  |  Advisory ID: CVE-2026-0259

Key Details

CVECVE-2026-0259
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Palo Alto Networks PAN-OS and Palo Alto Networks WildFire WF-500 and WF-500-B
Classified as
CWE-73 (External Control of File Name or Path)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (27% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Palo Alto NetworksPAN-OS
Palo Alto NetworksWildFire WF-500 and WF-500-B
SubsystemsIndustrial Networking & Connectivity
SectorsMulti-sector

What to Know

An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B appliances enables users to read sensitive information and delete arbitrary files. This vulnerability affects WF-500 and WF-500-B appliances running in the default non-FIPS configuration mode.

The WildFire Appliance (WF-500, WF-500-B) software update is now available to customers that use the WildFire Appliance (WF-500, WF-500-B) for on-premise sandboxing.

Please note that customers using the WildFire Public cloud service are NOT impacted by this vulnerability.

What to Do

Monitor Palo Alto Networks's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-0259
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-0259
Vendor advisoryhttps://security.paloaltonetworks.com/CVE-2026-0259

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-33092/ Acronis True Image for macOS Environment Variable Handling Enables Local Privilege Escalation 2026-09-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Acronis True Image for macOS Environment Variable Handling Enables Local Privilege Escalation

Status: UPDATED  |  Advisory ID: CVE-2026-33092

Key Details

CVECVE-2026-33092
CVSS Score / Version
7.8 (High) / CVSS v3.0
Updated2026-10-26
CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Acronis True Image OEM and Acronis True Image
Classified as
CWE-15 (External Control of System or Configuration Setting)
Exploitation prediction (EPSS)
0.18% probability of exploitation in the next 30 days (8% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
AcronisAcronis True Image OEM
AcronisAcronis True Image
SubsystemsGeneral OT
SectorsMultiple

What to Know

Local privilege escalation due to improper handling of environment variables. The following products are affected: Acronis True Image OEM (macOS) before build 42571, Acronis True Image (macOS) before build 42902. (NVD)

What to Do

Monitor Acronis's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-33092
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-33092

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-35225/ CODESYS EtherNet/IP Adapter Lets an Unauthenticated Remote Attacker Exhaust All TCP Connections 2026-09-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

CODESYS EtherNet/IP Adapter Lets an Unauthenticated Remote Attacker Exhaust All TCP Connections

Status: UPDATED  |  Advisory ID: CVE-2026-35225

Key Details

CVECVE-2026-35225
CVSS Score / Version
8.7 (High) / CVSS v4.0
Updated2026-10-26
Affected products
CODESYS EtherNetIP
Classified as
CWE-754 (Improper Check for Unusual or Exceptional Conditions)
Exploitation prediction (EPSS)
0.41% probability of exploitation in the next 30 days (35% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
CODESYSCODESYS EtherNetIP
SubsystemsGeneral OT
SectorsMultiple

What to Know

An unauthenticated remote attacker is able to exhaust all available TCP connections in the CODESYS EtherNet/IP adapter stack, preventing legitimate clients from establishing new connections.

What to Do

Monitor CODESYS's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-35225
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-35225

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-35227/ CODESYS Modbus TCP Server Race Condition Can Let an Unauthenticated Attacker Exhaust All TCP Connections 2026-09-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

CODESYS Modbus TCP Server Race Condition Can Let an Unauthenticated Attacker Exhaust All TCP Connections

Status: UPDATED  |  Advisory ID: CVE-2026-35227

Key Details

CVECVE-2026-35227
CVSS Score / Version
8.2 (High) / CVSS v4.0
Updated2026-10-26
Affected products
CODESYS Modbus
Classified as
CWE-772 (Missing Release of Resource after Effective Lifetime)
Exploitation prediction (EPSS)
0.35% probability of exploitation in the next 30 days (29% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
CODESYSCODESYS Modbus
SubsystemsGeneral OT
SectorsMultiple

What to Know

An unauthenticated remote attacker may exhaust all available TCP connections in the CODESYS Modbus TCP Server stack if a race condition in connection handling is successfully exploited, preventing legitimate clients from establishing new connections.

What to Do

Monitor CODESYS's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-35227
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-35227

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-3868/ Moxa EDR-8010 and EDR-G9010 HTTPS Management Length Parameter Flaw Lets an Unauthenticated Remote Attacker Trigger a Buffer Overflow 2026-09-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Moxa EDR-8010 and EDR-G9010 HTTPS Management Length Parameter Flaw Lets an Unauthenticated Remote Attacker Trigger a Buffer Overflow

Status: UPDATED  |  Advisory ID: CVE-2026-3868

Key Details

CVECVE-2026-3868
CVSS Score / Version
8.7 (High) / CVSS v4.0
Updated2026-10-26
Affected products
Moxa EDR-8010 Series and Moxa EDR-G9010 Series
Classified as
CWE-130 (Improper Handling of Length Parameter Inconsistency)
Exploitation prediction (EPSS)
0.37% probability of exploitation in the next 30 days (31% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MoxaEDR-8010 Series
MoxaEDR-G9010 Series
SubsystemsGeneral OT
SectorsMultiple

What to Know

An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. Because of improper validation of length parameters in the HTTPS management interface, an unauthenticated remote attacker could send specially crafted requests that trigger a buffer overflow condition, causing the web service to become unresponsive. Successful exploitation may result in a denial-of-service condition requiring a device reboot to restore normal operation. While successful exploitation can severely impact the availability of the affected device, no impact to the confidentiality or integrity of the affected product has been identified. Additionally, no confidentiality, integrity, or availability impact to the subsequent system has been identified. (NVD)

What to Do

Monitor Moxa's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-3868
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-3868
Vendor advisoryhttps://www.moxa.com/en/support/product-support/security-advisory/mpsa-261521-cve-2026-3867-cve-2026-3868-improper-ownership-management-and-improper-handling-of-length-parameter-incons

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-41220/ Acronis DeviceLock DLP Before Build 9.0.93212 Allows Local Privilege Escalation Through an Out-of-Bounds Write 2026-09-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Acronis DeviceLock DLP Before Build 9.0.93212 Allows Local Privilege Escalation Through an Out-of-Bounds Write

Status: UPDATED  |  Advisory ID: CVE-2026-41220

Key Details

CVECVE-2026-41220
CVSS Score / Version
7.8 (High) / CVSS v3.0
Updated2026-10-26
CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Acronis DeviceLock DLP and Acronis Cyber Protect Cloud Agent
Classified as
CWE-787 (Out-of-bounds Write)
Exploitation prediction (EPSS)
0.11% probability of exploitation in the next 30 days (1% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
AcronisAcronis DeviceLock DLP
AcronisAcronis Cyber Protect Cloud Agent
SubsystemsGeneral OT
SectorsMultiple

What to Know

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183. (NVD)

What to Do

Monitor Acronis's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-41220
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-41220

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-41952/ Acronis Windows Agents Before Build 42183 Allow Local Privilege Escalation Through a Write-What-Where Condition 2026-09-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Acronis Windows Agents Before Build 42183 Allow Local Privilege Escalation Through a Write-What-Where Condition

Status: UPDATED  |  Advisory ID: CVE-2026-41952

Key Details

CVECVE-2026-41952
CVSS Score / Version
7.8 (High) / CVSS v3.0
Updated2026-10-26
CVSS Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Acronis DeviceLock DLP and Acronis Cyber Protect Cloud Agent
Classified as
CWE-123 (Write-what-where Condition)
Exploitation prediction (EPSS)
0.11% probability of exploitation in the next 30 days (1% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
AcronisAcronis DeviceLock DLP
AcronisAcronis Cyber Protect Cloud Agent
SubsystemsGeneral OT
SectorsMultiple

What to Know

Local privilege escalation due to improper input validation. The following products are affected: Acronis DeviceLock DLP (Windows) before build 9.0.93212, Acronis Cyber Protect Cloud Agent (Windows) before build 42183. (NVD)

What to Do

Monitor Acronis's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-41952
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-41952

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-7668/ MikroTik RouterOS 6.49.8 SCEP Endpoint ASN1_STRING_data Out-of-Bounds Read Is Triggered Through transactionID or messageType 2026-09-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

MikroTik RouterOS 6.49.8 SCEP Endpoint ASN1_STRING_data Out-of-Bounds Read Is Triggered Through transactionID or messageType

Status: UPDATED  |  Advisory ID: CVE-2026-7668

Key Details

CVECVE-2026-7668
CVSS Score / Version
7.3 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is low; availability impact is low.
Affected products
MikroTik RouterOS
Classified as
CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Exploitation prediction (EPSS)
0.30% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MikroTikRouterOS
SubsystemsIndustrial Networking & Connectivity
SectorsMulti-sector

What to Know

A vulnerability was identified in MikroTik RouterOS 6.49.8. This vulnerability affects the function ASN1_STRING_data in the library nova/lib/www/scep.p of the component SCEP Endpoint. The manipulation of the argument transactionID/messageType leads to out-of-bounds read. The attack may be initiated remotely. The exploit is publicly available and might be used. You should upgrade the affected component. The vendor recommends to "use the latest v6.x or 7.x MikroTik RouterOS version, the reported issue should be fixed there." (NVD)

What to Do

Monitor MikroTik's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-7668
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-7668

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44578/ Next.js Self-Hosted WebSocket Upgrade Requests Can Drive Server-Side Request Forgery 2026-10-26T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Next.js Self-Hosted WebSocket Upgrade Requests Can Drive Server-Side Request Forgery

Status: EPSS-IMMINENT  |  Advisory ID: CVE-2026-44578

Key Details

CVECVE-2026-44578
CVSS Score / Version
8.6 (High) / CVSS v3.1
Updated2026-10-27
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is none; availability impact is none.
Affected products
Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat Trusted Artifact Signer 1.3, Red Hat Trusted Artifact Signer 1.4, vercel next.js, and Red Hat streams for Apache Kafka 3
Classified as
CWE-918 (Server-Side Request Forgery (SSRF))
Exploitation prediction (EPSS)
35.54% probability of exploitation in the next 30 days (98% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux AI (RHEL AI) 3
Red HatRed Hat Trusted Artifact Signer 1.3
Red HatRed Hat Trusted Artifact Signer 1.4
vercelnext.js
Red Hatstreams for Apache Kafka 3
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the built-in Node.js server can be vulnerable to server-side request forgery through crafted WebSocket upgrade requests. An attacker can cause the server to proxy requests to arbitrary internal or external destinations, which may expose internal services or cloud metadata endpoints. Vercel-hosted deployments are not affected. This vulnerability is fixed in 15.5.16 and 16.2.5. (NVD)

What to Do

Monitor Red Hat's and vercel's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44578
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44578
Vendor advisoryhttps://github.com/vercel/next.js/security/advisories/GHSA-c4j6-fc7j-m34r

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-42945/ NGINX Rewrite Module Heap Overflow Carries an EPSS Near 68 Percent When Unnamed PCRE Captures Follow a Rewrite Directive 2026-10-26T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

NGINX Rewrite Module Heap Overflow Carries an EPSS Near 68 Percent When Unnamed PCRE Captures Follow a Rewrite Directive

Status: EPSS-IMMINENT  |  Advisory ID: CVE-2026-42945

Key Details

CVECVE-2026-42945
CVSS Score / Version
8.1 (High) / CVSS v3.1
Updated2026-10-27
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
68.05% probability of exploitation in the next 30 days (99% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Satellite 6.18
Red HatRed Hat Satellite 6.19
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Update Infrastructure 5
Red HatRed Hat Hardened Images
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
Red HatRed Hat Openshift Data Foundation 4.17
Red HatRed Hat Openshift Data Foundation 4.18
Red HatRed Hat Openshift Data Foundation 4.19
Red HatRed Hat Openshift Data Foundation 4.20
Red HatRed Hat Openshift Data Foundation 4.21
F5dos
F5nginx_gateway_fabric
F5nginx_ingress_controller
F5nginx_instance_manager
F5nginx_open_source
F5nginx_plus
F5waf
F5NGINX Plus
F5NGINX Open Source
Red HatRed Hat Openshift Data Foundation 4.14
Red HatRed Hat Openshift Data Foundation 4.15
Red HatRed Hat Openshift Data Foundation 4.16
Red HatRed Hat Lightspeed proxy 1
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression (PCRE) capture (for example, $1, $2) with a replacement string that includes a question mark (?). An unauthenticated attacker along with conditions beyond its control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. (NVD)

What to Do

Monitor Red Hat's and F5's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-42945
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-42945
Vendor advisoryhttps://my.f5.com/manage/s/article/K000161019

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-23820/ AOS-10 and AOS-8 Instant Access Point CLI Lets an Authenticated Attacker Escape the Restricted Shell to Run Commands 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-10 and AOS-8 Instant Access Point CLI Lets an Authenticated Attacker Escape the Restricted Shell to Run Commands

Status: UPDATED  |  Advisory ID: CVE-2026-23820

Key Details

CVECVE-2026-23820
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos and Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
Classified as
CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'))
Exploitation prediction (EPSS)
0.56% probability of exploitation in the next 30 days (46% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
Hewlett Packard Enterprise (HPE)ArubaOS (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

A vulnerability in the command line interface of Access Points running AOS-10 and AOS-8 Instant could allow an authenticated remote attacker to execute system commands in a restricted shell environment. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-23820
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-23820
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05049en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-4370/ Juju Dqlite Database Endpoint Skips TLS Client Certificate Validation, Earning a CVSS of 10.0 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Juju Dqlite Database Endpoint Skips TLS Client Certificate Validation, Earning a CVSS of 10.0

Status: UPDATED  |  Advisory ID: CVE-2026-4370

Key Details

CVECVE-2026-4370
CVSS Score / Version
10.0 (Critical) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
canonical Juju
Classified as
CWE-295 (Improper Certificate Validation)
Exploitation prediction (EPSS)
0.38% probability of exploitation in the next 30 days (32% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
canonicalJuju
SubsystemsGeneral OT
SectorsMultiple

What to Know

A vulnerability was identified in Juju from version 3.2.0 until 3.6.19 and from version 4.0 until 4.0.4, where the internal Dqlite database cluster fails to perform proper TLS client and server authentication. Specifically, the Juju controller's database endpoint does not validate client certificates when a new node attempts to join the cluster. An unauthenticated attacker with network reachability to the Juju controller's Dqlite port can exploit this flaw to join the database cluster. Once joined, the attacker gains full read and write access to the underlying database, allowing for total data compromise. (NVD)

What to Do

Monitor canonical's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-4370
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-4370
Vendor advisoryhttps://github.com/juju/juju/security/advisories/GHSA-gvrj-cjch-728p

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44852/ AOS-8 and AOS-10 Certificate Download Flaw Lets an Authenticated Attacker Overwrite Arbitrary Files on the Operating System 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-8 and AOS-10 Certificate Download Flaw Lets an Authenticated Attacker Overwrite Arbitrary Files on the Operating System

Status: UPDATED  |  Advisory ID: CVE-2026-44852

Key Details

CVECVE-2026-44852
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-296 (Improper Following of a Certificate's Chain of Trust)
Exploitation prediction (EPSS)
0.44% probability of exploitation in the next 30 days (38% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

An authenticated remote code execution vulnerability exists in the AOS-8 and AOS-10 web-based management interface. A vulnerability in the certificate download functionality could allow an authenticated remote attacker to overwrite arbitrary files on the underlying operating system by exploiting improper input validation in the file path parameter. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system as a privileged user. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44852
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44852
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-41316/ Ruby ERB Guard Against Marshal.load Code Execution Does Not Cover Three Other Public Methods 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Ruby ERB Guard Against Marshal.load Code Execution Does Not Cover Three Other Public Methods

Status: UPDATED  |  Advisory ID: CVE-2026-41316

Key Details

CVECVE-2026-41316
CVSS Score / Version
8.1 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-693 (Protection Mechanism Failure)
Exploitation prediction (EPSS)
1.13% probability of exploitation in the next 30 days (66% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
rubyerb
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

ERB is a templating system for Ruby. Ruby 2.7.0 (before ERB 2.2.0 was published on rubygems.org) introduced an `@_init` instance variable guard in `ERB#result` and `ERB#run` to prevent code execution when an ERB object is reconstructed via `Marshal.load` (deserialization). However, three other public methods that also evaluate `@src` via `eval()` were not given the same guard: `ERB#def_method`, `ERB#def_module`, and `ERB#def_class`. An attacker who can trigger `Marshal.load` on untrusted data in a Ruby application that has `erb` loaded can use `ERB#def_module` (zero-arg, default parameters) as a code execution sink, bypassing the `@_init` protection entirely. ERB 4.0.3.1, 4.0.4.1, 6.0.1.1, and 6.0.4 patch the issue. (NVD)

What to Do

Monitor Red Hat's and ruby's web pages for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-41316
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-41316

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-33790/ A Malformed ICMPv6 Packet Crashes and Restarts the srxpfe Process on Junos OS SRX Series 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

A Malformed ICMPv6 Packet Crashes and Restarts the srxpfe Process on Junos OS SRX Series

Status: UPDATED  |  Advisory ID: CVE-2026-33790

Key Details

CVECVE-2026-33790
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
juniper junos and Juniper Networks Junos OS
Classified as
CWE-754 (Improper Check for Unusual or Exceptional Conditions)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (25% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
juniperjunos
Juniper NetworksJunos OS
SubsystemsGeneral OT
SectorsMultiple

What to Know

An Improper Check for Unusual or Exceptional Conditions vulnerability in the flow daemon (flowd) of Juniper Networks Junos OS on SRX Series allows an attacker sending a specific, malformed ICMPv6 packet to cause the srxpfe process to crash and restart. Continued receipt and processing of these packets will repeatedly crash the srxpfe process and sustain the Denial of Service (DoS) condition.

During NAT64 translation, receipt of a specific, malformed ICMPv6 packet destined to the device will cause the srxpfe process to crash and restart.

This issue cannot be triggered using IPv4 nor other IPv6 traffic.

This issue affects Junos OS on SRX Series:

* all versions before 21.2R3-S10,

* all versions of 21.3,

* from 21.4 before 21.4R3-S12,

* all versions of 22.1,

* from 22.2 before 22.2R3-S8,

* all versions of 22.4,

* from 22.4 before 22.4R3-S9,

* from 23.2 before 23.2R2-S6,

* from 23.4 before 23.4R2-S7,

* from 24.2 before 24.2R2-S3,

* from 24.4 before 24.4R2-S3,

* from 25.2 before 25.2R1-S2, 25.2R2. (NVD)

What to Do

Monitor juniper's and Juniper Networks's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-33790
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-33790
Vendor advisoryhttps://kb.juniper.net/JSA107874

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-5412/ Juju CloudSpec API Lets a Low-Privilege User Extract the Credentials Used to Bootstrap the Controller 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Juju CloudSpec API Lets a Low-Privilege User Extract the Credentials Used to Bootstrap the Controller

Status: UPDATED  |  Advisory ID: CVE-2026-5412

Key Details

CVECVE-2026-5412
CVSS Score / Version
9.9 (Critical) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
canonical Juju
Classified as
CWE-285 (Improper Authorization)
Exploitation prediction (EPSS)
0.45% probability of exploitation in the next 30 days (39% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
canonicalJuju
SubsystemsGeneral OT
SectorsMultiple

What to Know

In Juju versions prior to 2.9.57 and 3.6.21, an authorization issue exists in the Controller facade. An authenticated user can call the CloudSpec API method to extract the cloud credentials used to bootstrap the controller. This allows a low-privileged user to access sensitive credentials. This issue is resolved in Juju versions 2.9.57 and 3.6.21. (NVD)

What to Do

Monitor canonical's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-5412
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-5412

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-35420/ Windows Kernel Heap Overflow Lets an Authorized Local Attacker Elevate Privileges 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Kernel Heap Overflow Lets an Authorized Local Attacker Elevate Privileges

Status: UPDATED  |  Advisory ID: CVE-2026-35420

Key Details

CVECVE-2026-35420
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (25% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows Server 2025
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2022 (version 23H2)
MicrosoftWindows Server 2022, 23H2 Edition (Server Core installation)
MicrosoftWindows Server 2012 R2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-35420
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-35420
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35420

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-28955/ Safari 26.5 Memory Handling Fix Addresses a CVSS 8.8 Flaw That Crafted Web Content Can Use to Crash the Process 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Safari 26.5 Memory Handling Fix Addresses a CVSS 8.8 Flaw That Crafted Web Content Can Use to Crash the Process

Status: UPDATED  |  Advisory ID: CVE-2026-28955

Key Details

CVECVE-2026-28955
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Exploitation prediction (EPSS)
0.69% probability of exploitation in the next 30 days (53% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-28955
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-28955
Vendor advisoryhttps://support.apple.com/en-us/127110

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-7322/ Thunderbird Memory Safety Bugs Showed Evidence of Corruption and Are Fixed in Firefox 150.0.1 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Thunderbird Memory Safety Bugs Showed Evidence of Corruption and Are Fixed in Firefox 150.0.1

Status: UPDATED  |  Advisory ID: CVE-2026-7322

Key Details

CVECVE-2026-7322
CVSS Score / Version
7.3 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is low; availability impact is low.
Affected products
see table below
Classified as
CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (24% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Memory safety bugs present in Thunderbird ESR 140.10.0 and Thunderbird 150.0.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-7322
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-7322
Vendor advisoryhttps://www.mozilla.org/security/advisories/mfsa2026-35/

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-28953/ Safari 26.5 Fixes a Memory Handling Flaw That Lets Crafted Web Content Crash the Process on Apple Platforms 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Safari 26.5 Fixes a Memory Handling Flaw That Lets Crafted Web Content Crash the Process on Apple Platforms

Status: UPDATED  |  Advisory ID: CVE-2026-28953

Key Details

CVECVE-2026-28953
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is none.
Affected products
see table below
Classified as
CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Exploitation prediction (EPSS)
0.41% probability of exploitation in the next 30 days (35% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-28953
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-28953
Vendor advisoryhttps://support.apple.com/en-us/127110

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-40466/ Apache ActiveMQ HTTP Discovery Transport Connector Bypasses the CVE-2026-34197 Fix for Authenticated Attackers 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Apache ActiveMQ HTTP Discovery Transport Connector Bypasses the CVE-2026-34197 Fix for Authenticated Attackers

Status: EPSS-IMMINENT  |  Advisory ID: CVE-2026-40466

Key Details

CVECVE-2026-40466
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-20 (Improper Input Validation)
Exploitation prediction (EPSS)
4.78% probability of exploitation in the next 30 days (92% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
ApacheActiveMQ
ApacheActiveMQ Broker
Red HatRed Hat JBoss Enterprise Application Platform 7
ApacheApache ActiveMQ
ApacheApache ActiveMQ All
ApacheApache ActiveMQ Broker
SubsystemsIndustrial Networking & Connectivity
SectorsMultiple

What to Know

Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ.

An authenticated attacker may bypass the fix in CVE-2026-34197 by adding a connector using an HTTP Discovery transport via BrokerView.addNetworkConnector or BrokerView.addConnector through Jolokia if the activemq-http module is on the classpath.

A malicious HTTP endpoint can return a VM transport through the HTTP URI which will bypass the validation added in CVE-2026-34197. The attacker can then use the VM transport's brokerConfig parameter to load a remote Spring XML application context using ResourceXmlApplicationContext.

Because Spring's ResourceXmlApplicationContext instantiates all singleton beans before the BrokerService validates the configuration, arbitrary code execution occurs on the broker's JVM through bean factory methods such as Runtime.exec().

This issue affects Apache ActiveMQ Broker: before 5.19.6, from 6.0.0 before 6.2.5; Apache ActiveMQ All: before 5.19.6, from 6.0.0 before 6.2.5; Apache ActiveMQ: before 5.19.6, from 6.0.0 before 6.2.5.

Users are recommended to upgrade to version 5.19.6 or 6.2.5, which fixes the issue. (NVD)

What to Do

Monitor Apache's and Red Hat's web pages for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-40466
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-40466

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-33784/ Juniper Support Insights Virtual Lightweight Collector Ships With a Default Password That Gives an Unauthenticated Attacker Full Control 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Juniper Support Insights Virtual Lightweight Collector Ships With a Default Password That Gives an Unauthenticated Attacker Full Control

Status: UPDATED  |  Advisory ID: CVE-2026-33784

Key Details

CVECVE-2026-33784
CVSS Score / Version
9.8 (Critical) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
juniper virtual_lightweight_collector and Juniper Networks JSI LWC
Classified as
CWE-1393 (Use of Default Password)
Exploitation prediction (EPSS)
0.46% probability of exploitation in the next 30 days (39% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
junipervirtual_lightweight_collector
Juniper NetworksJSI LWC
SubsystemsGeneral OT
SectorsMultiple

What to Know

A Use of Default Password vulnerability in the Juniper Networks

Support Insights (JSI)

Virtual Lightweight Collector (vLWC) allows an unauthenticated, network-based attacker to take full control of the device.

vLWC software images ship with an initial password for a high privileged account. A change of this password is not enforced during the provisioning of the software, which can make full access to the system by unauthorized actors possible.This issue affects all versions of vLWC before 3.0.94. (NVD)

What to Do

Monitor juniper's and Juniper Networks's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-33784
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-33784
Vendor advisoryhttps://kb.juniper.net/JSA107871

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-42216/ OpenEXR IDManifest::init() Out-of-Bounds Read Scores CVSS 9.1 and Is Fixed in 3.2.9, 3.3.11 and 3.4.11 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

OpenEXR IDManifest::init() Out-of-Bounds Read Scores CVSS 9.1 and Is Fixed in 3.2.9, 3.3.11 and 3.4.11

Status: UPDATED  |  Advisory ID: CVE-2026-42216

Key Details

CVECVE-2026-42216
CVSS Score / Version
9.1 (Critical) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.46% probability of exploitation in the next 30 days (40% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 6
openexropenexr
AcademySoftwareFoundationopenexr
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3.3.11, and 3.4.0 to before 3.4.11, IDManifest::init() reconstructs strings from a prefix-compressed representation. If the previous string is longer than 255 bytes, the next string is expected to begin with a 2-byte prefix length. The code reads stringList[i][0] and stringList[i][1] without checking that the current string has at least two bytes. This issue has been patched in versions 3.2.9, 3.3.11, and 3.4.11. (NVD)

What to Do

Monitor Red Hat, openexr, and AcademySoftwareFoundation's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-42216
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-42216
Vendor advisoryhttps://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-65j8-95g9-jgj4

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-111461/ Moxa OnCell G3150A-LTE SMS Management Command Injection Needs the Feature Enabled and a Privileged Remote Attacker 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Moxa OnCell G3150A-LTE SMS Management Command Injection Needs the Feature Enabled and a Privileged Remote Attacker

Status: UPDATED  |  Advisory ID: CVE-2026-111461

Key Details

CVECVE-2026-111461
CVSS Score / Version
7.5 (High) / CVSS v4.0
Updated2026-10-27
Affected products
Moxa OnCell G3150A-LTE Series
Classified as
CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'))
Exploitation prediction (EPSS)
1.37% probability of exploitation in the next 30 days (72% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MoxaOnCell G3150A-LTE Series
SubsystemsGeneral OT
SectorsMultiple

What to Know

An OS command injection vulnerability exists in OnCell G3150A-LTE Series. When the SMS management functionality is enabled and configured, a remote attacker with the required privileges could exploit insufficient input validation in the SMS management functionality to execute arbitrary commands on the affected device. (NVD)

What to Do

Monitor Moxa's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-111461
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-111461
Vendor advisoryhttps://www.moxa.com/en/support/product-support/security-advisory/mpsa-269510-cve-2026-111459-cve-2026-111460-cve-2026-111461-vulnerabilities-in-moxa-remote-connect-suite-mrc-client

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-23823/ AOS-10 Access Point CLI Command Injection Lets an Authenticated Remote Attacker Run Operating System Commands 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-10 Access Point CLI Command Injection Lets an Authenticated Remote Attacker Run Operating System Commands

Status: UPDATED  |  Advisory ID: CVE-2026-23823

Key Details

CVECVE-2026-23823
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos and Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
Classified as
CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection'))
Exploitation prediction (EPSS)
0.96% probability of exploitation in the next 30 days (61% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
Hewlett Packard Enterprise (HPE)ArubaOS (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

A vulnerability in the command line interface of Access Points running AOS-10 could allow an authenticated remote attacker to perform command injection. Successful exploitation could allow an attacker to execute arbitrary commands on the underlying operating system.

NOTE: This vulnerability only impacts Access Points running AOS-10.7.x.x and above. AOS-10.4 AP and AOS-8 Instant software branches are not affected by this vulnerability. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-23823
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-23823
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05049en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-41044/ Apache ActiveMQ Admin Console Broker Name Bypasses Validation to Inject Code for an Authenticated Attacker 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Apache ActiveMQ Admin Console Broker Name Bypasses Validation to Inject Code for an Authenticated Attacker

Status: UPDATED  |  Advisory ID: CVE-2026-41044

Key Details

CVECVE-2026-41044
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-20 (Improper Input Validation)
Exploitation prediction (EPSS)
0.98% probability of exploitation in the next 30 days (62% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
ApacheActiveMQ
ApacheActiveMQ Broker
Red HatRed Hat JBoss Enterprise Application Platform 7
ApacheApache ActiveMQ
ApacheApache ActiveMQ All
ApacheApache ActiveMQ Broker
SubsystemsIndustrial Networking & Connectivity
SectorsMultiple

What to Know

Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All.

An authenticated attacker can use the admin web console page to construct a malicious broker name that bypasses name validation to include an xbean binding that can be later used by a VM transport to load a remote Spring XML application.

The attacker can then use the DestinationView mbean to send a message to trigger a VM transport creation that will reference this malicious broker name which can lead to loading the malicious Spring XML context file.

Because Spring's ResourceXmlApplicationContext instantiates all singleton beans before the BrokerService validates the configuration, arbitrary code execution occurs on the broker's JVM through bean factory methods such as Runtime.exec().

This issue affects Apache ActiveMQ: before 5.19.6, from 6.0.0 before 6.2.5; Apache ActiveMQ Broker: before 5.19.6, from 6.0.0 before 6.2.5; Apache ActiveMQ All: before 5.19.6, from 6.0.0 before 6.2.5.

Users are recommended to upgrade to version 6.2.5 or 5.19.6, which fixes the issue. (NVD)

What to Do

Monitor Apache's and Red Hat's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-41044
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-41044
Vendor advisoryhttps://activemq.apache.org/security-advisories.data/CVE-2026-41044-announcement.txt

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44866/ AOS-8 and AOS-10 Web Management Command Injection Can Give an Authenticated Remote Attacker Command Execution 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-8 and AOS-10 Web Management Command Injection Can Give an Authenticated Remote Attacker Command Execution

Status: UPDATED  |  Advisory ID: CVE-2026-44866

Key Details

CVECVE-2026-44866
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection'))
Exploitation prediction (EPSS)
0.90% probability of exploitation in the next 30 days (59% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44866
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44866
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-33771/ Juniper CTP OS Weak Local Account Passwords Could Let an Unauthenticated Network Attacker Take Over the Device 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Juniper CTP OS Weak Local Account Passwords Could Let an Unauthenticated Network Attacker Take Over the Device

Status: UPDATED  |  Advisory ID: CVE-2026-33771

Key Details

CVECVE-2026-33771
CVSS Score / Version
7.4 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
juniper ctp_operating_system and Juniper Networks CTP OS
Classified as
CWE-521 (Weak Password Requirements)
Exploitation prediction (EPSS)
0.26% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
juniperctp_operating_system
Juniper NetworksCTP OS
SubsystemsGeneral OT
SectorsMultiple

What to Know

A Weak Password Requirements vulnerability in the password management function of Juniper Networks CTP OS might allow an unauthenticated, network-based attacker to exploit weak passwords of local accounts and potentially take full control of the device.

The password management menu enables the administrator to set password complexity requirements, but these settings are not saved. The issue can be verified with the menu option "Show password requirements". Failure to enforce the intended requirements can lead to weak passwords being used, which significantly increases the likelihood that an attacker can guess these and subsequently attain unauthorized access.

This issue affects CTP OS versions 9.2R1 and 9.2R2. (NVD)

What to Do

Monitor juniper's and Juniper Networks's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-33771
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-33771
Vendor advisoryhttps://kb.juniper.net/JSA107864

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-6750/ Firefox and Thunderbird WebRender Privilege Escalation Is Fixed in Firefox 150 and ESR 140.10 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Firefox and Thunderbird WebRender Privilege Escalation Is Fixed in Firefox 150 and ESR 140.10

Status: UPDATED  |  Advisory ID: CVE-2026-6750

Key Details

CVECVE-2026-6750
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-269 (Improper Privilege Management)
Exploitation prediction (EPSS)
0.48% probability of exploitation in the next 30 days (41% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Privilege escalation in the Graphics: WebRender component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-6750
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-6750
Vendor advisoryhttps://www.mozilla.org/security/advisories/mfsa2026-30/

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-41089/ Windows Netlogon Stack Overflow Scores CVSS 9.8 With an EPSS Near 80 Percent and Lets an Unauthorized Network Attacker Execute Code 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Netlogon Stack Overflow Scores CVSS 9.8 With an EPSS Near 80 Percent and Lets an Unauthorized Network Attacker Execute Code

Status: EPSS-IMMINENT  |  Advisory ID: CVE-2026-41089

Key Details

CVECVE-2026-41089
CVSS Score / Version
9.8 (Critical) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-121 (Stack-based Buffer Overflow)
Exploitation prediction (EPSS)
79.62% probability of exploitation in the next 30 days (100% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows Server 2025
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2022 (version 23H2)
MicrosoftWindows Server 2022, 23H2 Edition (Server Core installation)
MicrosoftWindows Server 2012 R2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-41089
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-41089
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41089

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-4802/ Cockpit Log Viewer Links Carrying Shell Metacharacters Let a Remote Attacker Run Commands on the Host 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Cockpit Log Viewer Links Carrying Shell Metacharacters Let a Remote Attacker Run Commands on the Host

Status: UPDATED  |  Advisory ID: CVE-2026-4802

Key Details

CVECVE-2026-4802
CVSS Score / Version
8.0 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is low; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'))
Exploitation prediction (EPSS)
1.02% probability of exploitation in the next 30 days (63% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). An attacker can inject shell metacharacters and command substitutions into these parameters, leading to the execution of arbitrary shell commands on the affected system. This could result in a complete system compromise. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-4802
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-4802

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-64239/ Linux Kernel DAMON sysfs Fix Deletes a Tried Region in regions_rmdirs() to Close a Use-After-Free 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Linux Kernel DAMON sysfs Fix Deletes a Tried Region in regions_rmdirs() to Close a Use-After-Free

Status: UPDATED  |  Advisory ID: CVE-2026-64239

Key Details

CVECVE-2026-64239
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-27
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Linux Kernel
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.12% probability of exploitation in the next 30 days (2% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
LinuxLinux Kernel
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

In the Linux kernel, the following vulnerability has been resolved:

mm/damon/sysfs-schemes: delete tried region in regions_rmdirs()

DAMON sysfs maintains the DAMOS tried region directory objects via a

linked list. When the user requests refresh of the directories, DAMON

sysfs removes all the region directories first, and then generate updated

regions directory on the empty space. The removal function

(damon_sysfs_scheme_regions_rm_dirs()) only puts the kobj objects.

Deletion of the container region object from the linked list is done

inside the kobj release callback function.

If somehow the callback invocation is delayed, the list will contain

regions list that gonna be freed. If the updated region directories

creation is started in this situation, the list can be corrupted and

use-after-free can happen.

Because the kobj objects are managed by only DAMON sysfs, the issue cannot

happen in normal situation. But, such delays can be made on kernels that

built with CONFIG_DEBUG_KOBJECT_RELEASE. On the kernel, the issue can

indeed be reproduced like below.

# damo start --damos_action stat

# cd /sys/kernel/mm/damon/admin/kdamonds/0/

# for i in {1..10}; do echo update_schemes_tried_regions > state; done

# dmesg | grep underflow

[ 89.296152] refcount_t: underflow; use-after-free.

Fix the issue by removing the region object from the list when

decrementing the reference count.

Also update damos_sysfs_populate_region_dir() to add the region object to

the list only after the kobject_init_and_add() is success, so that fail of

kobject_init_and_add() is not leaving the deallocated object on the list.

The issue was discovered [1] by Sashiko. (NVD)

What to Do

Monitor Linux's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-64239
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-64239

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44868/ AOS-8 and AOS-10 Management Interface Command Injection Allows Authenticated Remote Operating System Commands 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-8 and AOS-10 Management Interface Command Injection Allows Authenticated Remote Operating System Commands

Status: UPDATED  |  Advisory ID: CVE-2026-44868

Key Details

CVECVE-2026-44868
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection'))
Exploitation prediction (EPSS)
0.90% probability of exploitation in the next 30 days (59% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44868
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44868
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-32219/ Microsoft Brokering File System Double Free Lets an Authorized Local Attacker Elevate Privileges 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Brokering File System Double Free Lets an Authorized Local Attacker Elevate Privileges

Status: UPDATED  |  Advisory ID: CVE-2026-32219

Key Details

CVECVE-2026-32219
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows 11 (version 24H2), Microsoft Windows 11 (version 25H2), Microsoft Windows 11 (version 26H1), and Microsoft Windows Server 2025
Classified as
CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
Exploitation prediction (EPSS)
0.18% probability of exploitation in the next 30 days (7% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-32219
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-32219
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32219

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44574/ Next.js Dynamic Route Middleware Protection Can Be Bypassed With Crafted Query Parameters 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Next.js Dynamic Route Middleware Protection Can Be Bypassed With Crafted Query Parameters

Status: UPDATED  |  Advisory ID: CVE-2026-44574

Key Details

CVECVE-2026-44574
CVSS Score / Version
8.1 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat Trusted Artifact Signer 1.3, Red Hat Trusted Artifact Signer 1.4, vercel next.js, and Red Hat streams for Apache Kafka 3
Classified as
CWE-288 (Authentication Bypass Using an Alternate Path or Channel)
Exploitation prediction (EPSS)
0.64% probability of exploitation in the next 30 days (50% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux AI (RHEL AI) 3
Red HatRed Hat Trusted Artifact Signer 1.3
Red HatRed Hat Trusted Artifact Signer 1.4
vercelnext.js
Red Hatstreams for Apache Kafka 3
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16 and 16.2.5, applications that rely on middleware to protect dynamic routes can be vulnerable to authorization bypass. In affected deployments, specially crafted query parameters can alter the dynamic route value seen by the page while leaving the visible path unchanged, which can allow protected content to be rendered without passing the expected middleware check. This vulnerability is fixed in 15.5.16 and 16.2.5. (NVD)

What to Do

Monitor Red Hat's and vercel's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44574
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44574
Vendor advisoryhttps://github.com/vercel/next.js/security/advisories/GHSA-492v-c6pp-mqqv

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44872/ AOS-8 and AOS-10 Web Interface Command Injection Lets an Authenticated Attacker Place Files on the Device Filesystem 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-8 and AOS-10 Web Interface Command Injection Lets an Authenticated Attacker Place Files on the Device Filesystem

Status: UPDATED  |  Advisory ID: CVE-2026-44872

Key Details

CVECVE-2026-44872
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection'))
Exploitation prediction (EPSS)
0.81% probability of exploitation in the next 30 days (57% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

A command injection vulnerability exists in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to place arbitrary files on the underlying filesystem of the affected device. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44872
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44872
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44870/ AOS-8 and AOS-10 PAPI CLI Service Command Injection Is Open to Authenticated Remote Attackers 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-8 and AOS-10 PAPI CLI Service Command Injection Is Open to Authenticated Remote Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-44870

Key Details

CVECVE-2026-44870
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection'))
Exploitation prediction (EPSS)
0.90% probability of exploitation in the next 30 days (59% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

Command injection vulnerabilities exist in the command line interface (CLI) service accessed by the PAPI protocol of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44870
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44870
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-34179/ Canonical LXD Certificate Update Skips Type Validation, Letting Restricted Authenticated Users Escalate Privileges Remotely 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Canonical LXD Certificate Update Skips Type Validation, Letting Restricted Authenticated Users Escalate Privileges Remotely

Status: UPDATED  |  Advisory ID: CVE-2026-34179

Key Details

CVECVE-2026-34179
CVSS Score / Version
9.1 (Critical) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
canonical lxd
Classified as
CWE-915 (Improperly Controlled Modification of Dynamically-Determined Object Attributes)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (20% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
canonicallxd
SubsystemsGeneral OT
SectorsMultiple

What to Know

In Canonical LXD versions 4.12 through 6.7, the doCertificateUpdate function in lxd/certificates.go does not validate the Type field when handling PUT/PATCH requests to /1.0/certificates/{fingerprint} for restricted TLS certificate users, allowing a remote authenticated attacker to escalate privileges to cluster admin.

What to Do

Monitor canonical's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-34179
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-34179

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-3505/ Bouncy Castle bcpg AEAD Packet Handling Allows Uncontrolled Resource Consumption 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Bouncy Castle bcpg AEAD Packet Handling Allows Uncontrolled Resource Consumption

Status: UPDATED  |  Advisory ID: CVE-2026-3505

Key Details

CVECVE-2026-3505
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-400 (Uncontrolled Resource Consumption)
Exploitation prediction (EPSS)
0.79% probability of exploitation in the next 30 days (56% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Red HatRed Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8
Red HatRed Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 9
Red HatRed Hat Single Sign-On 7
Red HatRed Hat build of Apache Camel 4 for Quarkus 3
Red HatRed Hat JBoss Enterprise Application Platform 8
Red HatRed Hat Process Automation 7
Red HatRed Hat Fuse 7
Red HatRed Hat JBoss Enterprise Application Platform 8.1.7.GA
Red HatOpenShift Developer Tools and Services 4.12
Red HatOpenShift Developer Tools and Services 4.13
Red HatOpenShift Developer Tools and Services 4.14
Red HatOpenShift Developer Tools and Services 4.15
Red HatOpenShift Developer Tools and Services 4.16
Red HatOpenShift Developer Tools and Services 4.17
Red HatOpenShift Developer Tools and Services 4.18
Red HatOpenShift Developer Tools and Services 4.19
Red HatOpenShift Developer Tools and Services 4.20
Red HatOpenShift Developer Tools and Services 4.21
Red HatOpenShift Developer Tools and Services 4.22
Red HatOpenShift Developer Tools and Services
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpg on all (pg modules).

This vulnerability is associated with program files AEADEncDataPacket.Java, BcAEADUtil.Java, JceAEADUtil.Java, OperatorHelper.Java.

This issue affects BC-JAVA: from 1.74 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-3505
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-3505

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-6753/ Firefox and Thunderbird WebRTC Boundary Condition Flaw Is Fixed in Firefox 150 and ESR 140.10 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Firefox and Thunderbird WebRTC Boundary Condition Flaw Is Fixed in Firefox 150 and ESR 140.10

Status: UPDATED  |  Advisory ID: CVE-2026-6753

Key Details

CVECVE-2026-6753
CVSS Score / Version
7.3 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is low; availability impact is low.
Affected products
see table below
Classified as
CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Exploitation prediction (EPSS)
0.31% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-6753
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-6753
Vendor advisoryhttps://www.mozilla.org/security/advisories/mfsa2026-30/

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-6846/ binutils XCOFF Object File Heap Overflow Can Be Triggered When a Local User Links a Crafted File 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

binutils XCOFF Object File Heap Overflow Can Be Triggered When a Local User Links a Crafted File

Status: UPDATED  |  Advisory ID: CVE-2026-6846

Key Details

CVECVE-2026-6846
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.17% probability of exploitation in the next 30 days (6% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatEnterprise Linux
Red HatOpenShift Container Platform
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Hardened Images
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted XCOFF (Extended Common Object File Format) object file during linking. A local attacker could trick a user into processing this malicious file, which could lead to arbitrary code execution, allowing the attacker to run unauthorized commands, or cause a denial of service, making the system unavailable. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-6846
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-6846

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-13162/ Hitachi Energy CoreTec Time Synchronization Handler Gives Authenticated Role Holders Full Command Control of the Device 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Hitachi Energy CoreTec Time Synchronization Handler Gives Authenticated Role Holders Full Command Control of the Device

Status: UPDATED  |  Advisory ID: CVE-2026-13162

Key Details

CVECVE-2026-13162
CVSS Score / Version
7.7 (High) / CVSS v4.0
Updated2026-10-27
Affected products
Hitachi Energy CoreTec 5 and Hitachi Energy CoreTec 4
Classified as
CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'))
Exploitation prediction (EPSS)
0.18% probability of exploitation in the next 30 days (8% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Hitachi EnergyCoreTec 5
Hitachi EnergyCoreTec 4
SubsystemsGeneral OT
SectorsMultiple

What to Know

An OS command vulnerability exists in CoreTec product that allows authenticated users with certain roles to execute arbitrary system commands with full control over the device. The vulnerability exists in the configuration daemon's time synchronization handler, which is responsible for setting the system time-zone. When processing time-zone configuration updates, the daemon constructs a shell command by concatenating user-supplied input without any sanitization or validation. (NVD)

What to Do

Monitor Hitachi Energy's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-13162
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-13162

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-7320/ Firefox and Thunderbird Audio/Video Boundary Flaw Can Disclose Information and Is Fixed in Firefox 150.0.1 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Firefox and Thunderbird Audio/Video Boundary Flaw Can Disclose Information and Is Fixed in Firefox 150.0.1

Status: UPDATED  |  Advisory ID: CVE-2026-7320

Key Details

CVECVE-2026-7320
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is none.
Affected products
see table below
Classified as
CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (25% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Information disclosure due to incorrect boundary conditions in the Audio/Video component. This vulnerability was fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-7320
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-7320
Vendor advisoryhttps://www.mozilla.org/security/advisories/mfsa2026-35/

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-32178/ .NET Special Element Handling Flaw Lets an Unauthorized Network Attacker Perform Spoofing 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

.NET Special Element Handling Flaw Lets an Unauthorized Network Attacker Perform Spoofing

Status: UPDATED  |  Advisory ID: CVE-2026-32178

Key Details

CVECVE-2026-32178
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is none.
Affected products
see table below
Classified as
CWE-138 (Improper Neutralization of Special Elements)
Exploitation prediction (EPSS)
2.28% probability of exploitation in the next 30 days (83% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Hardened Images
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
Microsoft.NET 10.0
Microsoft.NET 8.0
Microsoft.NET 9.0
MicrosoftMicrosoft Visual Studio 2022 version 17.14
Microsoft.net
Microsoftvisual_studio_2022
MicrosoftMicrosoft Visual Studio 2022 version 17.12
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Improper neutralization of special elements in .NET allows an unauthorized attacker to perform spoofing over a network.

What to Do

Monitor Red Hat's and Microsoft's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-32178
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-32178
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32178

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-40164/ jq's Hardcoded MurmurHash3 Seed Lets an Attacker Precompute Key Collisions With Crafted JSON 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

jq's Hardcoded MurmurHash3 Seed Lets an Attacker Precompute Key Collisions With Crafted JSON

Status: UPDATED  |  Advisory ID: CVE-2026-40164

Key Details

CVECVE-2026-40164
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-328 (Use of Weak Hash)
Exploitation prediction (EPSS)
0.37% probability of exploitation in the next 30 days (30% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat AI Inference Server 3.3
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Hardened Images
Red HatRed Hat OpenShift Container Platform 4.12
Red HatRed Hat OpenShift Container Platform 4.13
Red HatRed Hat OpenShift Container Platform 4.14
Red HatRed Hat OpenShift Container Platform 4.15
Red HatRed Hat OpenShift Container Platform 4.16
Red HatRed Hat OpenShift Container Platform 4.17
Red HatRed Hat OpenShift Container Platform 4.18
Red HatRed Hat OpenShift Container Platform 4.19
Red HatRed Hat AI Inference Server 3.2
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
jqlangjq
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used MurmurHash3 with a hardcoded, publicly visible seed (0x432A9843) for all JSON object hash table operations, which allowed an attacker to precompute key collisions offline. By supplying a crafted JSON object (~100 KB) where all keys hashed to the same bucket, hash table lookups degraded from O(1) to O(n), turning any jq expression into an O(n²) operation and causing significant CPU exhaustion. This affected common jq use cases such as CI/CD pipelines, web services, and data processing scripts, and was far more practical to exploit than existing heap overflow issues since it required only a small payload. This issue has been patched in commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784. (NVD)

What to Do

Monitor Red Hat's and jqlang's web pages for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-40164
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-40164

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44861/ AOS-8 and AOS-10 Management Protocol SQL Injection Flaw Targets Underlying Service Components With Administrator Credentials 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-8 and AOS-10 Management Protocol SQL Injection Flaw Targets Underlying Service Components With Administrator Credentials

Status: UPDATED  |  Advisory ID: CVE-2026-44861

Key Details

CVECVE-2026-44861
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (24% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44861
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44861
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-32195/ Windows Kernel Stack Overflow Lets an Authorized Local Attacker Elevate Privileges on Windows 11 26H1 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Kernel Stack Overflow Lets an Authorized Local Attacker Elevate Privileges on Windows 11 26H1

Status: UPDATED  |  Advisory ID: CVE-2026-32195

Key Details

CVECVE-2026-32195
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows 11 (version 26H1)
Classified as
CWE-121 (Stack-based Buffer Overflow)
Exploitation prediction (EPSS)
0.24% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 26H1)
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Stack-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-32195
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-32195
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32195

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44864/ AOS-8 and AOS-10 SQL Injection in Service Components Is Reachable by Authenticated Administrators Through the CLI 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-8 and AOS-10 SQL Injection in Service Components Is Reachable by Authenticated Administrators Through the CLI

Status: UPDATED  |  Advisory ID: CVE-2026-44864

Key Details

CVECVE-2026-44864
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (24% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44864
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44864
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-41020/ Eaton easyE4 Static Authentication Nonce Lets an Attacker With Captured Traffic Replay a Valid Login 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Eaton easyE4 Static Authentication Nonce Lets an Attacker With Captured Traffic Replay a Valid Login

Status: UPDATED  |  Advisory ID: CVE-2026-41020

Key Details

CVECVE-2026-41020
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-27
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Eaton easyE4
Classified as
CWE-294 (Authentication Bypass by Capture-replay)
Exploitation prediction (EPSS)
0.23% probability of exploitation in the next 30 days (13% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
EatoneasyE4
SubsystemsGeneral OT
SectorsMultiple

What to Know

Eaton easyE4 uses a static nonce during authentication, which could allow an unauthenticated attacker with access to captured authentication traffic to replay a valid authentication exchange and gain unauthorized access to the device.

What to Do

Monitor Eaton's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-41020
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-41020

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-43658/ Safari 26.5 Fixes a Memory Handling Flaw That Crafted Web Content Can Use to Crash Safari 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Safari 26.5 Fixes a Memory Handling Flaw That Crafted Web Content Can Use to Crash Safari

Status: UPDATED  |  Advisory ID: CVE-2026-43658

Key Details

CVECVE-2026-43658
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is none.
Affected products
see table below
Classified as
CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (25% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-43658
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-43658
Vendor advisoryhttps://support.apple.com/en-us/127110

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-33785/ Junos OS MX Series CLI Missing Authorization Lets Any Logged-In Low-Privilege User Compromise Managed Devices 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Junos OS MX Series CLI Missing Authorization Lets Any Logged-In Low-Privilege User Compromise Managed Devices

Status: UPDATED  |  Advisory ID: CVE-2026-33785

Key Details

CVECVE-2026-33785
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
juniper junos and Juniper Networks Junos OS
Classified as
CWE-862 (Missing Authorization)
Exploitation prediction (EPSS)
0.14% probability of exploitation in the next 30 days (3% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
juniperjunos
Juniper NetworksJunos OS
SubsystemsGeneral OT
SectorsMultiple

What to Know

A Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on MX Series allows a local, authenticated user with low privileges to execute specific commands which will lead to a complete compromise of managed devices.

Any user logged in, without requiring specific privileges, can issue 'request csds' CLI operational commands. These commands are only meant to be executed by high privileged or users designated for Juniper Device Manager (JDM) / Connected Security Distributed Services (CSDS) operations as they will impact all aspects of the devices managed via the respective MX.

This issue affects Junos OS on MX Series:

* 24.4 releases before 24.4R2-S3,

* 25.2 releases before 25.2R2.

This issue does not affect Junos OS releases before 24.4. (NVD)

What to Do

Monitor juniper's and Juniper Networks's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-33785
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-33785
Vendor advisoryhttps://kb.juniper.net/JSA107872

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-41035/ rsync -X Receiver Trusts an Untrusted xattr Length in qsort, Causing a Use-After-Free in Versions 3.0.1 Through 3.4.1 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

rsync -X Receiver Trusts an Untrusted xattr Length in qsort, Causing a Use-After-Free in Versions 3.0.1 Through 3.4.1

Status: UPDATED  |  Advisory ID: CVE-2026-41035

Key Details

CVECVE-2026-41035
CVSS Score / Version
7.4 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS Prose
attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is changed; confidentiality impact is low; integrity impact is low; availability impact is low.
Affected products
see table below
Classified as
CWE-130 (Improper Handling of Length Parameter Inconsistency)
Exploitation prediction (EPSS)
0.39% probability of exploitation in the next 30 days (33% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat OpenShift Container Platform 4.12
Red HatRed Hat OpenShift Container Platform 4.13
Red HatRed Hat OpenShift Container Platform 4.14
Red HatRed Hat OpenShift Container Platform 4.15
Red HatRed Hat OpenShift Container Platform 4.16
Red HatRed Hat OpenShift Container Platform 4.17
Red HatRed Hat OpenShift Container Platform 4.18
Red HatRed Hat OpenShift Container Platform 4.19
Red HatRed Hat OpenShift Container Platform 4
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatRed Hat Discovery 2
Red HatRed Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-41035
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-41035

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-23824/ AOS-8 and AOS-10 Protocol Component Lets Unauthenticated Crafted Messages Exhaust Resources Through Weak Input Validation 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-8 and AOS-10 Protocol Component Lets Unauthenticated Crafted Messages Exhaust Resources Through Weak Input Validation

Status: UPDATED  |  Advisory ID: CVE-2026-23824

Key Details

CVECVE-2026-23824
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-400 (Uncontrolled Resource Consumption)
Exploitation prediction (EPSS)
0.33% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network messages to the affected service. Due to insufficient input validation, successful exploitation may terminate a critical system process, resulting in a denial-of-service condition. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-23824
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-23824
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2024-36333/ AMD Cleanup Utility DLL Hijacking Could Let an Attacker Escalate Privileges 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AMD Cleanup Utility DLL Hijacking Could Let an Attacker Escalate Privileges

Status: UPDATED  |  Advisory ID: CVE-2024-36333

Key Details

CVECVE-2024-36333
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-27
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-427 (Uncontrolled Search Path Element)
Exploitation prediction (EPSS)
0.12% probability of exploitation in the next 30 days (2% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
AMDAMD Radeon™ RX 7000 Series Graphics Products
AMDAMD Radeon™ PRO W7000 Series Graphics Products
AMDradeon_software
AMDcleanup_utility
AMDAMD Radeon™ RX 5000 Series Graphics Products
AMDAMD Radeon™ PRO W5000 Series Graphics Products
AMDAMD Radeon™ RX 6000 Series Graphics Products
AMDAMD Cleanup Utility
AMDAMD Radeon™ PRO W6000 Series Graphics Products
AMDAMD Radeon™ RX Vega Series Graphics Cards
AMDAMD Radeon™ VII
AMDAMD Radeon™ PRO WX 8000/9000 Series Graphics Cards
AMDAMD Radeon™ PRO VII
SubsystemsGeneral OT
SectorsMultiple

What to Know

A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.

What to Do

Monitor AMD's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2024-36333
CVEhttps://www.cve.org/CVERecord?id=CVE-2024-36333
Vendor advisoryhttps://www.amd.com/en/resources/product-security/bulletin/AMD-SB-6027.html

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-34865/ HarmonyOS WEB Module Out-of-Bounds Write Carries CVSS 9.1 With Availability and Confidentiality Impact 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

HarmonyOS WEB Module Out-of-Bounds Write Carries CVSS 9.1 With Availability and Confidentiality Impact

Status: UPDATED  |  Advisory ID: CVE-2026-34865

Key Details

CVECVE-2026-34865
CVSS Score / Version
9.1 (Critical) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is high.
Affected products
huawei harmonyos
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.21% probability of exploitation in the next 30 days (11% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
huaweiharmonyos
SubsystemsGeneral OT
SectorsMultiple

What to Know

Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

What to Do

Monitor huawei's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-34865
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-34865
Vendor advisoryhttps://consumer.huawei.com/en/support/bulletinwearables/2026/4/

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-33816/ A Second pgx v5 Memory-Safety Flaw Also Scores CVSS 9.8 and Appears in 29 Red Hat Products 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

A Second pgx v5 Memory-Safety Flaw Also Scores CVSS 9.8 and Appears in 29 Red Hat Products

Status: UPDATED  |  Advisory ID: CVE-2026-33816

Key Details

CVECVE-2026-33816
CVSS Score / Version
9.8 (Critical) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-787 (Out-of-bounds Write)
Exploitation prediction (EPSS)
0.56% probability of exploitation in the next 30 days (47% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat OpenShift AI (RHOAI)
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Hardened Images
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.15
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.16
Red HatRed Hat 3scale API Management Platform 2
Red HatRed Hat Advanced Cluster Security 4.9
Red HatRed Hat Advanced Cluster Security for Kubernetes 4.10
Red HatRed Hat Trusted Artifact Signer 1.3
Red HatMulticluster Engine for Kubernetes
Red HatOpenShift Pipelines
Red HatRed Hat Advanced Cluster Security 4
Red HatCryostat 4 on RHEL 9
Red HatCustom Metric Autoscaler 2.19
Red HatMulticluster Global Hub 1.3.4
Red HatRed Hat Advanced Cluster Security 4.8
Red HatRed Hat Openshift Data Foundation 4.20
Red HatRed Hat OpenShift Pipelines 1.21
Red HatMulticluster Global Hub
Red HatRed Hat Trusted Artifact Signer
Red HatZero Trust Workload Identity Manager - Tech Preview
Red HatRHEM 1.0 for RHEL 9
Red HatRHEM 1.1 for RHEL 10
Red HatRHEM 1.1 for RHEL 9
Red HatMulticluster Global Hub 1.7.0
Red HatRed Hat Edge Manager 1.1
Red HatRed Hat Edge Manager 1
jackcpgx
github.com/jackc/pgx/v5github.com/jackc/pgx/v5/pgproto3
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Memory-safety vulnerability in github.com/jackc/pgx/v5.

What to Do

Monitor Red Hat, jackc, and github.com/jackc/pgx/v5's web pages for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-33816
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-33816

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-33778/ A Malformed IPsec Message Can Take Down Junos OS on SRX and MX Series Through kmd and iked 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

A Malformed IPsec Message Can Take Down Junos OS on SRX and MX Series Through kmd and iked

Status: UPDATED  |  Advisory ID: CVE-2026-33778

Key Details

CVECVE-2026-33778
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
juniper junos and Juniper Networks Junos OS
Classified as
CWE-1286 (Improper Validation of Syntactic Correctness of Input)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (27% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
juniperjunos
Juniper NetworksJunos OS
SubsystemsGeneral OT
SectorsMultiple

What to Know

An Improper Validation of Syntactic Correctness of Input vulnerability in the IPsec library used by kmd and iked of Juniper Networks Junos OS on SRX Series and MX Series allows an unauthenticated, network-based attacker to cause a complete Denial-of-Service (DoS).

If an affected device receives a specifically malformed first ISAKMP packet from the initiator, the kmd/iked process will crash and restart, which momentarily prevents new security associations (SAs) for from being established. Repeated exploitation of this vulnerability causes a complete inability to establish new VPN connections.

This issue affects Junos OS on

SRX Series and MX Series:

* all versions before 22.4R3-S9,

* 23.2 version before 23.2R2-S6,

* 23.4 version before 23.4R2-S7,

* 24.2 versions before 24.2R2-S4,

* 24.4 versions before 24.4R2-S3,

* 25.2 versions before 25.2R1-S2, 25.2R2. (NVD)

What to Do

Monitor juniper's and Juniper Networks's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-33778
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-33778
Vendor advisoryhttps://kb.juniper.net/JSA107868

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-26171/ .NET Uncontrolled Resource Consumption Lets an Unauthorized Network Attacker Deny Service 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

.NET Uncontrolled Resource Consumption Lets an Unauthorized Network Attacker Deny Service

Status: UPDATED  |  Advisory ID: CVE-2026-26171

Key Details

CVECVE-2026-26171
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-400 (Uncontrolled Resource Consumption)
Exploitation prediction (EPSS)
1.75% probability of exploitation in the next 30 days (78% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Hardened Images
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
Microsoft.NET 10.0
Microsoft.NET 8.0
Microsoft.NET 9.0
Microsoft.net
MicrosoftPowerShell 7.5
MicrosoftPowerShell 7.6
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Uncontrolled resource consumption in .NET allows an unauthorized attacker to deny service over a network.

What to Do

Monitor Red Hat's and Microsoft's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-26171
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-26171
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26171

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-26183/ Windows RPC API Access Control Flaw Lets an Authorized Local Attacker Elevate Privileges 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows RPC API Access Control Flaw Lets an Authorized Local Attacker Elevate Privileges

Status: UPDATED  |  Advisory ID: CVE-2026-26183

Key Details

CVECVE-2026-26183
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-284 (Improper Access Control)
Exploitation prediction (EPSS)
0.26% probability of exploitation in the next 30 days (17% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows Server 2025
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2022 (version 23H2)
MicrosoftWindows Server 2022, 23H2 Edition (Server Core installation)
MicrosoftWindows Server 2012 R2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-26183
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-26183
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26183

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-6747/ Firefox and Thunderbird WebRTC Use-After-Free Is Fixed in Firefox 150 and ESR 140.10 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Firefox and Thunderbird WebRTC Use-After-Free Is Fixed in Firefox 150 and ESR 140.10

Status: UPDATED  |  Advisory ID: CVE-2026-6747

Key Details

CVECVE-2026-6747
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.40% probability of exploitation in the next 30 days (34% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Use-after-free in the WebRTC component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-6747
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-6747
Vendor advisoryhttps://www.mozilla.org/security/advisories/mfsa2026-30/

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-6786/ Firefox and Thunderbird Memory Safety Bugs Showed Evidence of Memory Corruption and Are Fixed in Firefox 150 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Firefox and Thunderbird Memory Safety Bugs Showed Evidence of Memory Corruption and Are Fixed in Firefox 150

Status: UPDATED  |  Advisory ID: CVE-2026-6786

Key Details

CVECVE-2026-6786
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.50% probability of exploitation in the next 30 days (43% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Memory safety bugs present in Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-6786
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-6786
Vendor advisoryhttps://www.mozilla.org/security/advisories/mfsa2026-30/

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-28291/ simple-git Option Manipulation Bypasses the Blocks on -u and --upload-pack, an Incomplete Fix That Allows Arbitrary Commands 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

simple-git Option Manipulation Bypasses the Blocks on -u and --upload-pack, an Incomplete Fix That Allows Arbitrary Commands

Status: UPDATED  |  Advisory ID: CVE-2026-28291

Key Details

CVECVE-2026-28291
CVSS Score / Version
8.1 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Red Hat Build of Keycloak, Red Hat Process Automation 7, simple-git_project simple-git, and steveukx git-js
Classified as
CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'))
Exploitation prediction (EPSS)
0.77% probability of exploitation in the next 30 days (55% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Build of Keycloak
Red HatRed Hat Process Automation 7
simple-git_projectsimple-git
steveukxgit-js
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

simple-git enables running native Git commands from JavaScript. Versions up to and including 3.31.1 allow execution of arbitrary commands through Git option manipulation, bypassing safety checks meant to block dangerous options like -u and --upload-pack. The flaw stems from an incomplete fix for CVE-2022-25860, as Git's flexible option parsing allows numerous character combinations (e.g., -vu, -4u, -nu) to circumvent the regular-expression-based blocklist in the unsafe operations plugin. Due to the virtually infinite number of valid option variants that Git accepts, a complete blocklist-based mitigation may be infeasible without fully emulating Git's option parsing behavior. This issue has been fixed in version 3.32.0. (NVD)

What to Do

Monitor Red Hat, simple-git_project, and steveukx's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-28291
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-28291
Vendor advisoryhttps://github.com/steveukx/git-js/security/advisories/GHSA-jcxm-m3jx-f287

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44855/ AOS-8 and AOS-10 CLI Management Components Carry Stack Overflows an Authenticated Administrator Can Target With Crafted Input 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-8 and AOS-10 CLI Management Components Carry Stack Overflows an Authenticated Administrator Can Target With Crafted Input

Status: UPDATED  |  Advisory ID: CVE-2026-44855

Key Details

CVECVE-2026-44855
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-121 (Stack-based Buffer Overflow)
Exploitation prediction (EPSS)
0.35% probability of exploitation in the next 30 days (29% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44855
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44855
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-26168/ Windows Ancillary Function Driver for WinSock Race Condition Lets an Authorized Local Attacker Elevate Privileges 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Ancillary Function Driver for WinSock Race Condition Lets an Authorized Local Attacker Elevate Privileges

Status: UPDATED  |  Advisory ID: CVE-2026-26168

Key Details

CVECVE-2026-26168
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
Exploitation prediction (EPSS)
0.18% probability of exploitation in the next 30 days (7% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2022 (version 23H2)
MicrosoftWindows Server 2022, 23H2 Edition (Server Core installation)
MicrosoftWindows Server 2012 R2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-26168
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-26168
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26168

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-42584/ Netty HttpClientCodec Mispairs Responses With Requests When a Server Sends a 103, Opening Response Smuggling 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Netty HttpClientCodec Mispairs Responses With Requests When a Server Sends a 103, Opening Response Smuggling

Status: UPDATED  |  Advisory ID: CVE-2026-42584

Key Details

CVECVE-2026-42584
CVSS Score / Version
7.3 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is low; availability impact is low.
Affected products
see table below
Classified as
CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'))
Exploitation prediction (EPSS)
0.84% probability of exploitation in the next 30 days (58% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux AI (RHEL AI) 3
Red HatRed Hat OpenShift AI 2.25
Red HatRed Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Red HatRed Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8
Red HatRed Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 10
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 9
Red HatRed Hat JBoss Enterprise Application Platform Expansion Pack
Red HatRed Hat Single Sign-On 7
Red HatRed Hat Data Grid 8
Red HatRed Hat build of Apicurio Registry 3
Red HatRed Hat build of Debezium 3
Red HatRed Hat Build of Keycloak
Red HatRed Hat Process Automation 7
Red HatRed Hat AMQ Clients
Red HatRed Hat Fuse 7
Red HatRed Hat JBoss Enterprise Application Platform 8.1.7.GA
Red HatRed Hat OpenShift Dev Spaces 3.28
Red HatRed Hat build of Apicurio Registry 2
Red HatCryostat 4 on RHEL 9
Red HatRed Hat OpenShift Dev Spaces 3.29
Red HatOpenShift Serverless
Red HatStreams for Apache Kafka 3.2.1
nettynetty
io.nettynetty-codec-http
Red HatRed Hat AMQ Broker 7.13.6
Red HatRed Hat AMQ Broker 7.14.1
Red HatRed Hat build of Apache Camel 4.18.1.P1 for Spring Boot 3.5.16
Red HatRed Hat build of Quarkus 3.27.4
Red HatRed Hat build of OptaPlanner 8
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, HttpClientCodec pairs each inbound response with an outbound request by queue.poll() once per response, including for 1xx. If the client pipelines GET then HEAD and the server sends 103, then 200 with GET body, then 200 for HEAD, the queue pairs HEAD with the first 200. The HEAD rule then skips reading that message’s body, so the GET entity bytes stay on the stream and the following 200 is parsed from the wrong offset. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final. (NVD)

What to Do

Monitor Red Hat, netty, and io.netty's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-42584
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-42584
Vendor advisoryhttps://github.com/netty/netty/security/advisories/GHSA-57rv-r2g8-2cj3

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-6751/ Firefox and Thunderbird Web Codecs Uninitialized Memory Is Fixed in Firefox 150 and ESR 140.10 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Firefox and Thunderbird Web Codecs Uninitialized Memory Is Fixed in Firefox 150 and ESR 140.10

Status: UPDATED  |  Advisory ID: CVE-2026-6751

Key Details

CVECVE-2026-6751
CVSS Score / Version
7.3 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is low; availability impact is low.
Affected products
see table below
Classified as
CWE-457 (Use of Uninitialized Variable)
Exploitation prediction (EPSS)
0.31% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Uninitialized memory in the Audio/Video: Web Codecs component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-6751
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-6751
Vendor advisoryhttps://www.mozilla.org/security/advisories/mfsa2026-30/

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-6970/ Canonical authd Before 0.6.4 Assigns the Wrong Primary Group When GID Differs From UID, Enabling Local Privilege Escalation 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Canonical authd Before 0.6.4 Assigns the Wrong Primary Group When GID Differs From UID, Enabling Local Privilege Escalation

Status: UPDATED  |  Advisory ID: CVE-2026-6970

Key Details

CVECVE-2026-6970
CVSS Score / Version
7.3 (High) / CVSS v4.0
Updated2026-10-26
Affected products
canonical authd
Classified as
CWE-842 (Placement of User into Incorrect Group)
Exploitation prediction (EPSS)
0.11% probability of exploitation in the next 30 days (1% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
canonicalauthd
SubsystemsGeneral OT
SectorsMultiple

What to Know

authd prior to version 0.6.4 contains a logic error in primary group ID assignment that can lead to local privilege escalation. When a user's primary group ID (GID) differs from their UID, either because the account was created with authd prior to version 0.5.4 or because the primary group was manually changed via the `authctl group set-gid` command, and the user's identity provider record is updated, authd incorrectly resets the user's primary group ID to their UID upon next login. This causes newly created files and directories to be owned by the wrong group, causing denial of service issues, and potentially granting unintended access to other local users and allowing local privilege escalation. (NVD)

What to Do

Monitor canonical's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-6970
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-6970

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-34734/ HDF5 h5dump Heap Use-After-Free Is Triggered by a Malicious h5 File Through H5T__conv_struct 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

HDF5 h5dump Heap Use-After-Free Is Triggered by a Malicious h5 File Through H5T__conv_struct

Status: UPDATED  |  Advisory ID: CVE-2026-34734

Key Details

CVECVE-2026-34734
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Red Hat Enterprise Linux AI (RHEL AI) 3 and hdfgroup hdf5
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.19% probability of exploitation in the next 30 days (9% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux AI (RHEL AI) 3
hdfgrouphdf5
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

HDF5 is software for managing data. In 1.14.1-2 and earlier, a heap-use-after-free was found in the h5dump helper utility. An attacker who can supply a malicious h5 file can trigger a heap use-after-free. The freed object is referenced in a memmove call from H5T__conv_struct. The original object was allocated by H5D__typeinfo_init_phase3 and freed by H5D__typeinfo_term. (NVD)

What to Do

Monitor Red Hat's and hdfgroup's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-34734
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-34734
Vendor advisoryhttps://github.com/HDFGroup/hdf5/security/advisories/GHSA-w7v2-9cmr-pwwj

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-27928/ Windows Hello Input Validation Flaw Lets an Unauthorized Network Attacker Bypass a Security Feature 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Hello Input Validation Flaw Lets an Unauthorized Network Attacker Bypass a Security Feature

Status: UPDATED  |  Advisory ID: CVE-2026-27928

Key Details

CVECVE-2026-27928
CVSS Score / Version
8.7 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
see table below
Classified as
CWE-20 (Improper Input Validation)
Exploitation prediction (EPSS)
0.41% probability of exploitation in the next 30 days (35% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows Server 2025
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2022 (version 23H2)
MicrosoftWindows Server 2022, 23H2 Edition (Server Core installation)
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper input validation in Windows Hello allows an unauthorized attacker to bypass a security feature over a network.

What to Do

Monitor Microsoft's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-27928
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-27928
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27928

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-27912/ Windows Kerberos Improper Authorization Lets an Authorized Attacker on an Adjacent Network Elevate Privileges 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Kerberos Improper Authorization Lets an Authorized Attacker on an Adjacent Network Elevate Privileges

Status: UPDATED  |  Advisory ID: CVE-2026-27912

Key Details

CVECVE-2026-27912
CVSS Score / Version
8.0 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is adjacent; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-285 (Improper Authorization)
Exploitation prediction (EPSS)
0.41% probability of exploitation in the next 30 days (35% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows Server 2025
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2022 (version 23H2)
MicrosoftWindows Server 2022, 23H2 Edition (Server Core installation)
MicrosoftWindows Server 2012 R2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper authorization in Windows Kerberos allows an authorized attacker to elevate privileges over an adjacent network.

What to Do

Monitor Microsoft's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-27912
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-27912
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27912

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44859/ AOS-8 and AOS-10 CLI Management Services Contain Stack Overflows Reachable by Authenticated Administrators 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-8 and AOS-10 CLI Management Services Contain Stack Overflows Reachable by Authenticated Administrators

Status: UPDATED  |  Advisory ID: CVE-2026-44859

Key Details

CVECVE-2026-44859
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-121 (Stack-based Buffer Overflow)
Exploitation prediction (EPSS)
0.36% probability of exploitation in the next 30 days (30% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

Stack-based buffer overflow vulnerabilities exist in several underlying management service components accessed through the command-line interface of the AOS-8 and AOS-10 Operating Systems. An authenticated attacker with administrative privileges could exploit these vulnerabilities by sending specially crafted requests to the affected services. Successful exploitation could allow the attacker to execute arbitrary code with elevated privileges on the underlying operating system. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44859
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44859
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44575/ Next.js App Router Prefetch Route Variants Can Bypass Middleware and Proxy Authorization Checks 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Next.js App Router Prefetch Route Variants Can Bypass Middleware and Proxy Authorization Checks

Status: UPDATED  |  Advisory ID: CVE-2026-44575

Key Details

CVECVE-2026-44575
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is none.
Affected products
Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat Trusted Artifact Signer 1.3, Red Hat Trusted Artifact Signer 1.4, vercel next.js, and Red Hat streams for Apache Kafka 3
Classified as
CWE-288 (Authentication Bypass Using an Alternate Path or Channel)
Exploitation prediction (EPSS)
1.59% probability of exploitation in the next 30 days (76% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux AI (RHEL AI) 3
Red HatRed Hat Trusted Artifact Signer 1.3
Red HatRed Hat Trusted Artifact Signer 1.4
vercelnext.js
Red Hatstreams for Apache Kafka 3
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16 and 16.2.5, App Router applications that rely on middleware or proxy-based checks for authorization can allow unauthorized access through transport-specific route variants used for segment prefetching. In affected configurations, specially crafted .rsc and segment-prefetch URLs can resolve to the same page without being matched by the intended middleware rule, which can allow protected content to be reached without the expected authorization check. This vulnerability is fixed in 15.5.16 and 16.2.5. (NVD)

What to Do

Monitor Red Hat's and vercel's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44575
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44575
Vendor advisoryhttps://github.com/vercel/next.js/security/advisories/GHSA-267c-6grr-h53f

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-34282/ Oracle Java SE Networking Component Flaw Can Be Exploited by an Unauthenticated Attacker for Uncontrolled Resource Consumption 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Oracle Java SE Networking Component Flaw Can Be Exploited by an Unauthenticated Attacker for Uncontrolled Resource Consumption

Status: UPDATED  |  Advisory ID: CVE-2026-34282

Key Details

CVECVE-2026-34282
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-400 (Uncontrolled Resource Consumption)
Exploitation prediction (EPSS)
0.64% probability of exploitation in the next 30 days (50% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
OracleJRE
OracleJDK
OracleGraalVM for JDK
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Hardened Images
OracleOracle GraalVM
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
OracleOracle Java SE
OracleOracle GraalVM for JDK
OracleOracle GraalVM Enterprise Edition
Red HatRed Hat Build of OpenJDK 17.0.19
Red HatRed Hat Build of OpenJDK 17.0.9
Red HatRed Hat Build of OpenJDK 21.0.11
Red HatRed Hat Build of OpenJDK 25.0.3
Red HatRed Hat Enterprise Linux 10.2 Extended Update Support
Red HatRed Hat OpenJDK 11 els for RHEL 7
Red HatRed Hat OpenJDK 11 els for RHEL 8
Red HatRed Hat OpenJDK 11 els for RHEL 9
Red HatTemurin Build of OpenJDK 25.0.3
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and 21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). (NVD)

What to Do

Monitor Oracle's and Red Hat's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-34282
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-34282
Vendor advisoryhttps://www.oracle.com/security-alerts/cpuapr2026.html

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-2332/ Jetty HTTP/1.1 Chunk Extension Parsing Enables Request Smuggling Similar to the Funky Chunks Techniques 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Jetty HTTP/1.1 Chunk Extension Parsing Enables Request Smuggling Similar to the Funky Chunks Techniques

Status: UPDATED  |  Advisory ID: CVE-2026-2332

Key Details

CVECVE-2026-2332
CVSS Score / Version
7.4 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
see table below
Classified as
CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'))
Exploitation prediction (EPSS)
1.31% probability of exploitation in the next 30 days (70% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Single Sign-On 7
Red HatRed Hat AMQ Broker 7
Red HatRed Hat build of Apache Camel 4 for Quarkus 3
Red HatRed Hat Satellite 6
Red HatRed Hat Satellite 6.16 for RHEL 8
eclipseEclipse Jetty
Red HatRed Hat build of Debezium 3
Red HatRed Hat Satellite 6.16 for RHEL 9
Red HatRed Hat Satellite 6.17 for RHEL 9
Red HatRed Hat Satellite 6.18 for RHEL 9
Red HatRed Hat Satellite 6.19 for RHEL 9
Red HatRed Hat Fuse 7
Red HatOpenShift Developer Tools and Services 4.12
Red HatOpenShift Developer Tools and Services 4.13
Red HatOpenShift Developer Tools and Services 4.14
Red HatOpenShift Developer Tools and Services 4.15
Red HatOpenShift Developer Tools and Services 4.16
Red HatOpenShift Developer Tools and Services 4.17
Red HatOpenShift Developer Tools and Services 4.18
Red HatOpenShift Developer Tools and Services 4.19
Red HatOpenShift Developer Tools and Services 4.20
Red HatOpenShift Developer Tools and Services 4.21
Red HatOpenShift Developer Tools and Services 4.22
Red HatOpenShift Developer Tools and Services
Red Hatstreams for Apache Kafka 2
Red HatRed Hat OpenShift Dev Spaces 3.27
Red Hatstreams for Apache Kafka 3
Red HatRed Hat Offline Knowledge Portal 1.2.12
Red HatRed Hat JBoss Web Server 6
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here:

* https://w4ke.info/2025/06/18/funky-chunks.html

* https://w4ke.info/2025/10/29/funky-chunks-2.html

Jetty terminates chunk extension parsing at \r\n inside quoted strings instead of treating this as an error.

POST / HTTP/1.1

Host: localhost

Transfer-Encoding: chunked

1;ext="val

X

0

GET /smuggled HTTP/1.1

...

Note how the chunk extension does not close the double quotes, and it is able to inject a smuggled request. (NVD)

What to Do

Monitor Red Hat's and eclipse's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-2332
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-2332
Vendor advisoryhttps://github.com/jetty/jetty.project/security/advisories/GHSA-355h-qmc2-wpwf

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44862/ Administrator-Level Attackers Can Inject SQL Through Crafted Parameters in AOS-8 and AOS-10 Service Components 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Administrator-Level Attackers Can Inject SQL Through Crafted Parameters in AOS-8 and AOS-10 Service Components

Status: UPDATED  |  Advisory ID: CVE-2026-44862

Key Details

CVECVE-2026-44862
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (24% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

SQL injection vulnerabilities exist in several underlying service components accessible through the AOS-8 and AOS-10 command-line interface and management protocol. An authenticated attacker with administrative privileges could exploit these vulnerabilities by injecting crafted input into parameters that are passed unsanitized to backend database queries. Successful exploitation could allow the attacker to execute arbitrary commands on the underlying operating system. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44862
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44862
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44865/ AOS-8 and AOS-10 Management Interface Command Injection Is Open to Authenticated Remote Attackers Targeting the Underlying System 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-8 and AOS-10 Management Interface Command Injection Is Open to Authenticated Remote Attackers Targeting the Underlying System

Status: UPDATED  |  Advisory ID: CVE-2026-44865

Key Details

CVECVE-2026-44865
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection'))
Exploitation prediction (EPSS)
0.92% probability of exploitation in the next 30 days (60% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44865
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44865
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-6855/ InstructLab Chat Session logs_dir Path Traversal Lets a Local Attacker Write Files to Arbitrary Locations 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

InstructLab Chat Session logs_dir Path Traversal Lets a Local Attacker Write Files to Arbitrary Locations

Status: UPDATED  |  Advisory ID: CVE-2026-6855

Key Details

CVECVE-2026-6855
CVSS Score / Version
7.1 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
Red Hat Enterprise Linux AI (RHEL AI) 3 and Red Hat instructlab
Classified as
CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))
Exploitation prediction (EPSS)
0.16% probability of exploitation in the next 30 days (6% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux AI (RHEL AI) 3
Red Hatinstructlab
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handler by manipulating the `logs_dir` parameter. This allows the attacker to create new directories and write files to arbitrary locations on the system, potentially leading to unauthorized data modification or disclosure. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-6855
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-6855
Vendor advisoryhttps://access.redhat.com/security/cve/CVE-2026-6855

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-106174/ FortiOS 8.0.0 and 7.6.4 Through 7.6.6 Improper Locking Lets Crafted HTTP Requests Deny Service to the HTTPS Management Interface 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

FortiOS 8.0.0 and 7.6.4 Through 7.6.6 Improper Locking Lets Crafted HTTP Requests Deny Service to the HTTPS Management Interface

Status: UPDATED  |  Advisory ID: CVE-2026-106174

Key Details

CVECVE-2026-106174
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-27
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
Fortinet FortiOS
Classified as
CWE-667 (Improper Locking)
Exploitation prediction (EPSS)
0.28% probability of exploitation in the next 30 days (21% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
FortinetFortiOS
SubsystemsOT Supporting Infrastructure
SectorsMulti-sector

What to Know

A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HTTP requests.

What to Do

Monitor Fortinet's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-106174
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-106174

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-27913/ Windows BitLocker Input Validation Flaw Lets an Unauthorized Local Attacker Bypass a Security Feature 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows BitLocker Input Validation Flaw Lets an Unauthorized Local Attacker Bypass a Security Feature

Status: UPDATED  |  Advisory ID: CVE-2026-27913

Key Details

CVECVE-2026-27913
CVSS Score / Version
7.7 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS Prose
attack vector is local; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
see table below
Classified as
CWE-20 (Improper Input Validation)
Exploitation prediction (EPSS)
0.30% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2022 (version 23H2)
MicrosoftWindows Server 2022, 23H2 Edition (Server Core installation)
MicrosoftWindows Server 2012 R2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature locally.

What to Do

Monitor Microsoft's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-27913
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-27913
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-27913

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44854/ AOS-8 and AOS-10 Web Interface Command Injection Lets an Authenticated Remote Attacker Upload Arbitrary Files to the Operating System 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-8 and AOS-10 Web Interface Command Injection Lets an Authenticated Remote Attacker Upload Arbitrary Files to the Operating System

Status: UPDATED  |  Advisory ID: CVE-2026-44854

Key Details

CVECVE-2026-44854
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection'))
Exploitation prediction (EPSS)
1.01% probability of exploitation in the next 30 days (63% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated remote attacker to upload arbitrary files to the underlying operating system, potentially leading to remote code execution as a privileged user. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44854
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44854
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-6100/ CPython Decompressors Can Free Memory Twice After a MemoryError When an lzma, bz2 or gzip Instance Is Reused 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

CPython Decompressors Can Free Memory Twice After a MemoryError When an lzma, bz2 or gzip Instance Is Reused

Status: UPDATED  |  Advisory ID: CVE-2026-6100

Key Details

CVECVE-2026-6100
CVSS Score / Version
8.1 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.58% probability of exploitation in the next 30 days (48% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat AI Inference Server 3.3
Red HatRed Hat Enterprise Linux AI (RHEL AI) 3
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7
Red HatRed Hat Update Infrastructure 5
Red HatRed Hat Hardened Images
Red HatRed Hat AI Inference Server 3.2
Red HatRHEL-8 based Middleware Containers
Red HatRed Hat Enterprise Linux AI 3.3
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
Python Software FoundationCPython
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used. This scenario can be triggered if the process is under memory pressure. The fix cleans up the dangling pointer in this specific error condition.

The vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable. (NVD)

What to Do

Monitor Red Hat's and Python Software Foundation's web pages for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-6100
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-6100

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-32080/ Windows WalletService Use-After-Free Lets an Authorized Local Attacker Elevate Privileges 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows WalletService Use-After-Free Lets an Authorized Local Attacker Elevate Privileges

Status: UPDATED  |  Advisory ID: CVE-2026-32080

Key Details

CVECVE-2026-32080
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.21% probability of exploitation in the next 30 days (12% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows Server 2025
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2022 (version 23H2)
MicrosoftWindows Server 2022, 23H2 Edition (Server Core installation)
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows WalletService allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-32080
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-32080
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-32080

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-25660/ Ericsson CodeChecker URL Suffix Bypasses Authentication and Can Assign Arbitrary Permissions to Existing Users 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Ericsson CodeChecker URL Suffix Bypasses Authentication and Can Assign Arbitrary Permissions to Existing Users

Status: UPDATED  |  Advisory ID: CVE-2026-25660

Key Details

CVECVE-2026-25660
CVSS Score / Version
9.8 (Critical) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Ericsson codechecker
Classified as
CWE-290 (Authentication Bypass by Spoofing)
Exploitation prediction (EPSS)
0.45% probability of exploitation in the next 30 days (39% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Ericssoncodechecker
SubsystemsGeneral OT
SectorsMultiple

What to Know

CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.

Authentication bypass occurs when the URL ends with Authentication with certain function calls. This bypass allows assigning arbitrary permission to any user existing in CodeChecker.

This issue affects CodeChecker: through 6.27.3. (NVD)

What to Do

Monitor Ericsson's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-25660
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-25660
Vendor advisoryhttps://github.com/Ericsson/codechecker/security/advisories/GHSA-4v9x-cqc5-j645

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-23825/ AOS-8 and AOS-10 Protocol-Handling Component Accepts Crafted Network Messages From Unauthenticated Attackers Due to Weak Input Validation 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AOS-8 and AOS-10 Protocol-Handling Component Accepts Crafted Network Messages From Unauthenticated Attackers Due to Weak Input Validation

Status: UPDATED  |  Advisory ID: CVE-2026-23825

Key Details

CVECVE-2026-23825
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-20 (Improper Input Validation)
Exploitation prediction (EPSS)
0.33% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

Vulnerabilities exist in a protocol-handling component of AOS-8 and AOS-10 Operating Systems. An unauthenticated attacker could exploit these vulnerabilities by sending specially crafted network messages to the affected service. Due to insufficient input validation, successful exploitation may terminate a critical system process, resulting in a denial-of-service condition. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-23825
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-23825
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-106087/ Hitachi Energy TRO600 Arbitrary File Read Lets Unauthenticated Attackers Download Configuration Files and Password Data 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Hitachi Energy TRO600 Arbitrary File Read Lets Unauthenticated Attackers Download Configuration Files and Password Data

Status: UPDATED  |  Advisory ID: CVE-2026-106087

Key Details

CVECVE-2026-106087
CVSS Score / Version
8.7 (High) / CVSS v4.0
Updated2026-10-27
Affected products
Hitachi Energy TRO600 Series Firmware
Classified as
CWE-306 (Missing Authentication for Critical Function)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (16% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Hitachi EnergyTRO600 Series Firmware
SubsystemsGeneral OT
SectorsMultiple

What to Know

TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read or download arbitrary files on the affected device, including sensitive configuration files and password data, resulting in the disclosure of sensitive information. (NVD)

What to Do

Monitor Hitachi Energy's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-106087
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-106087

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-8094/ Firefox ESR and Thunderbird WebRTC Code Injection Scores CVSS 9.8 and Is Fixed in ESR 140.10.2 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Firefox ESR and Thunderbird WebRTC Code Injection Scores CVSS 9.8 and Is Fixed in ESR 140.10.2

Status: UPDATED  |  Advisory ID: CVE-2026-8094

Key Details

CVECVE-2026-8094
CVSS Score / Version
9.8 (Critical) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-94 (Improper Control of Generation of Code ('Code Injection'))
Exploitation prediction (EPSS)
0.45% probability of exploitation in the next 30 days (39% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Other issue in the WebRTC component. This vulnerability was fixed in Firefox ESR 140.10.2 and Thunderbird 140.10.2. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-8094
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-8094
Vendor advisoryhttps://www.mozilla.org/security/advisories/mfsa2026-41/

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-5588/ Bouncy Castle bcpkix Broken Cryptographic Algorithm Flaw Appears in 27 Red Hat Products 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Bouncy Castle bcpkix Broken Cryptographic Algorithm Flaw Appears in 27 Red Hat Products

Status: UPDATED  |  Advisory ID: CVE-2026-5588

Key Details

CVECVE-2026-5588
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is high; availability impact is none.
Affected products
see table below
Classified as
CWE-327 (Use of a Broken or Risky Cryptographic Algorithm)
Exploitation prediction (EPSS)
0.78% probability of exploitation in the next 30 days (56% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat OpenShift AI (RHOAI)
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Red HatRed Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8
Red HatRed Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
Red HatRed Hat JBoss Enterprise Application Platform 8.1 for RHEL 9
Red HatRed Hat Single Sign-On 7
Red HatRed Hat build of Apache Camel 4 for Quarkus 3
Red HatRed Hat build of Debezium 3
Red HatRed Hat JBoss Enterprise Application Platform 8
Red HatRed Hat Process Automation 7
Red HatRed Hat Fuse 7
Red HatRed Hat JBoss Enterprise Application Platform 8.1.7.GA
Red HatOpenShift Developer Tools and Services 4.12
Red HatOpenShift Developer Tools and Services 4.13
Red HatOpenShift Developer Tools and Services 4.14
Red HatOpenShift Developer Tools and Services 4.15
Red HatOpenShift Developer Tools and Services 4.16
Red HatOpenShift Developer Tools and Services 4.17
Red HatOpenShift Developer Tools and Services 4.18
Red HatOpenShift Developer Tools and Services 4.19
Red HatOpenShift Developer Tools and Services 4.20
Red HatOpenShift Developer Tools and Services 4.21
Red HatOpenShift Developer Tools and Services 4.22
Red HatRed Hat OpenShift Dev Spaces 3.28
Red HatOpenShift Developer Tools and Services
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all (pkix modules), Legion of the Bouncy Castle Inc. BCPKIX-FIPS bcpkix on All (pkix modules), Legion of the Bouncy Castle Inc. BCPIX-LTS bcpkix on All (pkix modules).

This vulnerability is associated with program files JcaContentVerifierProviderBuilder.Java, JcaContentVerfierProviderBuilder.Java.

This issue affects BC-JAVA: from 1.67 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84; BCPKIX-FIPS: from 2.0.6 before 2.0.11, from 2.1.7 before 2.1.11; BCPIX-LTS: from 2.73.7 before 2.73.11. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-5588
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-5588

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-20186/ Cisco ISE Command Injection Reaches CVSS 9.9 for Attackers Holding Read Only Admin Credentials 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Cisco ISE Command Injection Reaches CVSS 9.9 for Attackers Holding Read Only Admin Credentials

Status: EPSS-IMMINENT  |  Advisory ID: CVE-2026-20186

Key Details

CVECVE-2026-20186
CVSS Score / Version
9.9 (Critical) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Cisco Identity Services Engine and Cisco Identity Services Engine Software
Classified as
CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection'))
Exploitation prediction (EPSS)
5.60% probability of exploitation in the next 30 days (93% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
CiscoIdentity Services Engine
CiscoCisco Identity Services Engine Software
SubsystemsIndustrial Networking & Connectivity
SectorsCritical Manufacturing, Energy, Transportation Systems, Water and Wastewater Systems

What to Know

A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have at least Read Only Admin credentials.

This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain user-level access to the underlying operating system and then elevate privileges to root. In single-node ISE deployments, successful exploitation of these vulnerabilities could cause the affected ISE node to become unavailable, resulting in a denial of service (DoS) condition. In that condition, endpoints that have not already authenticated would be unable to access the network until the node is restored. (NVD)

What to Do

Monitor Cisco's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-20186
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-20186
Vendor advisoryhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-rce-4fverepv

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-26154/ Windows Server Update Service Input Validation Flaw Lets an Unauthorized Network Attacker Tamper With Data 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Server Update Service Input Validation Flaw Lets an Unauthorized Network Attacker Tamper With Data

Status: UPDATED  |  Advisory ID: CVE-2026-26154

Key Details

CVECVE-2026-26154
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-20 (Improper Input Validation)
Exploitation prediction (EPSS)
1.06% probability of exploitation in the next 30 days (65% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows Server 2025
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2022 (version 23H2)
MicrosoftWindows Server 2022, 23H2 Edition (Server Core installation)
MicrosoftWindows Server 2012 R2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper input validation in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.

What to Do

Monitor Microsoft's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-26154
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-26154
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26154

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2024-21962/ AMD RAID Driver Input Validation Flaw Could Let an Attacker Point to Arbitrary Memory Across 28 Processor and Graphics Products 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AMD RAID Driver Input Validation Flaw Could Let an Attacker Point to Arbitrary Memory Across 28 Processor and Graphics Products

Status: UPDATED  |  Advisory ID: CVE-2024-21962

Key Details

CVECVE-2024-21962
CVSS Score / Version
8.6 (High) / CVSS v4.0
Updated2026-10-27
Affected products
see table below
Classified as
CWE-1220 (Insufficient Granularity of Access Control)
Exploitation prediction (EPSS)
0.11% probability of exploitation in the next 30 days (1% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
AMDAMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
AMDAMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
AMDAMD Ryzen™ 7040 Series Mobile Processors with Radeon™ Graphics
AMDAMD Ryzen™ 7020 Series Processors with Radeon™ Graphics
AMDAMD Ryzen™ 7045 Series Mobile Processors with Radeon™ Graphics
AMDAMD Ryzen™ 7000 Series Desktop Processors
AMDAMD Ryzen™ 3000 Series Desktop Processors
AMDAMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
AMDAMD Ryzen™ 9000HX Series Processors
AMDAMD Ryzen™ AI 300 Series Processors
AMDAMD Ryzen™ Threadripper™ PRO 5000 WX-Series Processors
AMDAMD Ryzen™ 8000 Series Desktop Processors
AMDAMD Ryzen™ 9000 Series Desktop Processors
AMDAMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics
AMDAMD Ryzen™ 4000 Series Desktop Processors
AMDAMD Ryzen™ 5000 Series Desktop Processors
AMDAMD Ryzen™ 5000 Series Desktop Processors with Radeon™ Graphics
AMDAMD Ryzen™ 8040 Series Mobile Processors with Radeon™ Graphics
AMDAMD Ryzen™ 6000 Series Processors with Radeon™ Graphics
AMDAMD Ryzen™ AI Max 300 Series Processors
AMDAMD EPYC™ 4004 Series Processors
AMDAMD EPYC™ 4005 Series Processors
AMDAMD Ryzen™ Threadripper™ 7000 WX-Series Processors
AMDAMD Ryzen™ 3000 Series Mobile Processors with Radeon™ Graphics
AMDAMD Ryzen™ Z2 Series Processors
AMDAMD Ryzen™ Threadripper™ 9000 Series
AMDAMD Ryzen™ 2000 Mobile Processors
AMDAMD EPYC™ Embedded 4005 Series Processors
SubsystemsGeneral OT
SectorsMultiple

What to Know

Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution.

What to Do

Monitor AMD's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2024-21962
CVEhttps://www.cve.org/CVERecord?id=CVE-2024-21962

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-34178/ Canonical LXD Backup Import Checks One Archive File Against Project Restrictions but Builds the Instance From Another 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Canonical LXD Backup Import Checks One Archive File Against Project Restrictions but Builds the Instance From Another

Status: UPDATED  |  Advisory ID: CVE-2026-34178

Key Details

CVECVE-2026-34178
CVSS Score / Version
9.1 (Critical) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
canonical lxd
Classified as
CWE-20 (Improper Input Validation)
Exploitation prediction (EPSS)
0.42% probability of exploitation in the next 30 days (37% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
canonicallxd
SubsystemsGeneral OT
SectorsMultiple

What to Know

In Canonical LXD before 6.8, the backup import path validates project restrictions against backup/index.yaml in the supplied tar archive but creates the instance from backup/container/backup.yaml, a separate file in the same archive that is never checked against project restrictions. An authenticated remote attacker with instance-creation permission in a restricted project can craft a backup archive where backup.yaml carries restricted settings such as security.privileged=true or raw.lxc directives, bypassing all project restriction enforcement and allowing full host compromise. (NVD)

What to Do

Monitor canonical's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-34178
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-34178

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-33999/ X.Org XKB Compatibility Map Integer Underflow Lets a Local or Remote X11 Client Trigger a Buffer Read Overrun 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

X.Org XKB Compatibility Map Integer Underflow Lets a Local or Remote X11 Client Trigger a Buffer Read Overrun

Status: UPDATED  |  Advisory ID: CVE-2026-33999

Key Details

CVECVE-2026-33999
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-191 (Integer Underflow (Wrap or Wraparound))
Exploitation prediction (EPSS)
0.38% probability of exploitation in the next 30 days (32% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatRed Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or remote X11 server access to trigger a buffer read overrun. This can lead to memory-safety violations and potentially a denial of service (DoS) or other severe impacts. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-33999
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-33999

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-41142/ OpenEXR ImageChannel::resize Integer Overflow Is Fixed in 3.2.9, 3.3.11 and 3.4.11 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

OpenEXR ImageChannel::resize Integer Overflow Is Fixed in 3.2.9, 3.3.11 and 3.4.11

Status: UPDATED  |  Advisory ID: CVE-2026-41142

Key Details

CVECVE-2026-41142
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-190 (Integer Overflow or Wraparound)
Exploitation prediction (EPSS)
0.44% probability of exploitation in the next 30 days (38% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
openexropenexr
AcademySoftwareFoundationopenexr
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From versions 3.0.0 to before 3.2.9, 3.3.0 to before 3.3.11, and 3.4.0 to before 3.4.11, there is an integer overflow in ImageChannel::resize that leads to heap OOB write via OpenEXRUtil public API. This issue has been patched in versions 3.2.9, 3.3.11, and 3.4.11. (NVD)

What to Do

Monitor Red Hat, openexr, and AcademySoftwareFoundation's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-41142
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-41142
Vendor advisoryhttps://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-m25w-72cj-q6mg

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-8090/ Firefox and Thunderbird DOM Networking Use-After-Free Is Fixed in Firefox 150.0.2 and ESR 140.10.2 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Firefox and Thunderbird DOM Networking Use-After-Free Is Fixed in Firefox 150.0.2 and ESR 140.10.2

Status: UPDATED  |  Advisory ID: CVE-2026-8090

Key Details

CVECVE-2026-8090
CVSS Score / Version
7.3 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is low; availability impact is low.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (24% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 140.10.2. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-8090
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-8090
Vendor advisoryhttps://www.mozilla.org/security/advisories/mfsa2026-40/

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-33815/ pgx v5 Memory-Safety Flaw Scores CVSS 9.8 and Appears in 29 Red Hat Products 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

pgx v5 Memory-Safety Flaw Scores CVSS 9.8 and Appears in 29 Red Hat Products

Status: UPDATED  |  Advisory ID: CVE-2026-33815

Key Details

CVECVE-2026-33815
CVSS Score / Version
9.8 (Critical) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-787 (Out-of-bounds Write)
Exploitation prediction (EPSS)
0.60% probability of exploitation in the next 30 days (49% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat OpenShift AI (RHOAI)
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Hardened Images
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.14
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.15
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.16
Red HatRed Hat 3scale API Management Platform 2
Red HatRed Hat Advanced Cluster Security 4.9
Red HatRed Hat Advanced Cluster Security for Kubernetes 4.10
Red HatRed Hat Trusted Artifact Signer 1.3
Red HatMulticluster Engine for Kubernetes
Red HatOpenShift Pipelines
Red HatRed Hat Advanced Cluster Security 4
Red HatCryostat 4 on RHEL 9
Red HatCustom Metric Autoscaler 2.19
Red HatMulticluster Global Hub 1.3.4
Red HatRed Hat Advanced Cluster Security 4.8
Red HatRed Hat Openshift Data Foundation 4.20
Red HatMulticluster Global Hub
Red HatRed Hat Trusted Artifact Signer
Red HatZero Trust Workload Identity Manager - Tech Preview
Red HatRHEM 1.0 for RHEL 9
Red HatRHEM 1.1 for RHEL 10
Red HatRHEM 1.1 for RHEL 9
Red HatMulticluster Global Hub 1.7.0
Red HatRed Hat Edge Manager 1
jackcpgx
github.com/jackc/pgx/v5github.com/jackc/pgx/v5/pgproto3
Red HatCustom Metric Autoscaler operator for Red Hat Openshift
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Memory-safety vulnerability in github.com/jackc/pgx/v5.

What to Do

Monitor Red Hat, jackc, and github.com/jackc/pgx/v5's web pages for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-33815
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-33815

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-34177/ Canonical LXD Denylist Omits raw.apparmor and raw.qemu.conf, Weakening the restricted.virtual-machines.lowlevel Project Restriction 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Canonical LXD Denylist Omits raw.apparmor and raw.qemu.conf, Weakening the restricted.virtual-machines.lowlevel Project Restriction

Status: UPDATED  |  Advisory ID: CVE-2026-34177

Key Details

CVECVE-2026-34177
CVSS Score / Version
9.1 (Critical) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
canonical lxd
Classified as
CWE-184 (Incomplete List of Disallowed Inputs)
Exploitation prediction (EPSS)
0.36% probability of exploitation in the next 30 days (30% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
canonicallxd
SubsystemsGeneral OT
SectorsMultiple

What to Know

Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden (lxd/project/limits/permissions.go), which omits raw.apparmor and raw.qemu.conf from the set of keys blocked under the restricted.virtual-machines.lowlevel=block project restriction. A remote attacker with can_edit permission on a VM instance in a restricted project can inject an AppArmor rule and a QEMU chardev configuration that bridges the LXD Unix socket into the guest VM, enabling privilege escalation to LXD cluster administrator and subsequently to host root. (NVD)

What to Do

Monitor canonical's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-34177
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-34177

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-33814/ A Go net/http SETTINGS_MAX_FRAME_SIZE of 0 Sends the HTTP/2 Transport Into an Infinite CONTINUATION Frame Loop 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

A Go net/http SETTINGS_MAX_FRAME_SIZE of 0 Sends the HTTP/2 Transport Into an Infinite CONTINUATION Frame Loop

Status: UPDATED  |  Advisory ID: CVE-2026-33814

Key Details

CVECVE-2026-33814
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
Exploitation prediction (EPSS)
0.84% probability of exploitation in the next 30 days (58% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat OpenShift AI 3.4
Red HatRed Hat Enterprise Linux AI (RHEL AI) 3
Red HatRed Hat OpenShift AI (RHOAI)
Red HatRed Hat OpenShift AI 2.25
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Hardened Images
Red HatRed Hat OpenShift Container Platform 4.12
Red HatRed Hat OpenShift Container Platform 4.14
Red HatRed Hat OpenShift Container Platform 4.15
Red HatRed Hat OpenShift Container Platform 4.16
Red HatRed Hat OpenShift Container Platform 4.17
Red HatRed Hat OpenShift Container Platform 4.19
Red HatRed Hat OpenShift Container Platform 4
Red HatRed Hat OpenShift Container Platform 4.20
Red HatRed Hat OpenShift Container Platform 4.21
Red HatRed Hat OpenShift Container Platform 4.22
Red HatRed Hat OpenShift Virtualization 4
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.16
Red HatRed Hat 3scale API Management Platform 2
Red HatRed Hat Openshift Data Foundation 4
Red HatCluster Observability Operator 1.5.0
Red HatRed Hat OpenShift Service Mesh 3.0
Red HatRed Hat OpenShift Service Mesh 3.1
Red HatRed Hat OpenShift Service Mesh 3.2
Red HatRed Hat OpenShift Service Mesh 3.3
Red HatMulticluster Engine for Kubernetes
Red HatOpenShift Service Mesh 3
Red Hatmulticluster engine for Kubernetes 2.11
Red HatRed Hat Openshift Data Foundation 4.22
Red HatRed Hat Connectivity Link 1
Red HatRed Hat OpenShift distributed tracing 3.10.2
Red HatOpenShift API for Data Protection 1.6
Red HatRed Hat OpenShift Workload Availability 0.12
Red HatRed Hat OpenShift Workload Availability 0.13
Red HatRed Hat OpenShift Workload Availability 0.3
Red HatRed Hat OpenShift Workload Availability 0.7
Red HatRed Hat OpenShift Workload Availability 0.8
Red HatRed Hat OpenShift Workload Availability 5.7
Red HatFile Integrity Operator
Red HatMachine Deletion Remediation Operator
Red HatNode HealthCheck Operator
Red HatRed Hat Ceph Storage 5
Red HatRed Hat Ceph Storage 6
Red HatRed Hat Ceph Storage 9
Red HatRed Hat Service Interconnect 2
golang.org/x/netgolang.org/x/net/http2
Go standard librarynet/http
Red HatRed Hat Ceph Storage 7
Red HatRed Hat Ceph Storage 8
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

What to Do

Monitor Red Hat, golang.org/x/net, and Go standard library's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-33814
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-33814
Vendor advisoryhttps://pkg.go.dev/vuln/GO-2026-4918

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44573/ Next.js Pages Router i18n Apps With Middleware Authorization Can Leak Protected Page Data Through Locale-less /_next/data/ Requests 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Next.js Pages Router i18n Apps With Middleware Authorization Can Leak Protected Page Data Through Locale-less /_next/data/ Requests

Status: UPDATED  |  Advisory ID: CVE-2026-44573

Key Details

CVECVE-2026-44573
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is none.
Affected products
Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat Trusted Artifact Signer 1.3, Red Hat Trusted Artifact Signer 1.4, vercel next.js, and Red Hat streams for Apache Kafka 3
Classified as
CWE-863 (Incorrect Authorization)
Exploitation prediction (EPSS)
0.80% probability of exploitation in the next 30 days (56% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux AI (RHEL AI) 3
Red HatRed Hat Trusted Artifact Signer 1.3
Red HatRed Hat Trusted Artifact Signer 1.4
vercelnext.js
Red Hatstreams for Apache Kafka 3
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applications using the Pages Router with i18n configured and middleware/proxy-based authorization can allow unauthorized access to protected page data through locale-less /_next/data/<buildId>/<page>.json requests. In affected configurations, middleware does not run for the unprefixed data route, allowing an attacker to retrieve SSR JSON for protected pages without passing the intended authorization checks. This vulnerability is fixed in 15.5.16 and 16.2.5. (NVD)

What to Do

Monitor Red Hat's and vercel's web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44573
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44573
Vendor advisoryhttps://github.com/vercel/next.js/security/advisories/GHSA-36qx-fr4f-26g5

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-6859/ InstructLab Hardcodes trust_remote_code=True, Letting a Malicious HuggingFace Model Run Python Code on ilab Users 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

InstructLab Hardcodes trust_remote_code=True, Letting a Malicious HuggingFace Model Run Python Code on ilab Users

Status: UPDATED  |  Advisory ID: CVE-2026-6859

Key Details

CVECVE-2026-6859
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Red Hat Enterprise Linux AI (RHEL AI) 3 and Red Hat instructlab
Classified as
CWE-829 (Inclusion of Functionality from Untrusted Control Sphere)
Exploitation prediction (EPSS)
0.44% probability of exploitation in the next 30 days (38% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux AI (RHEL AI) 3
Red Hatinstructlab
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in InstructLab. The `linux_train.py` script hardcodes `trust_remote_code=True` when loading models from HuggingFace. This allows a remote attacker to achieve arbitrary Python code execution by convincing a user to run `ilab train/download/generate` with a specially crafted malicious model from the HuggingFace Hub. This vulnerability can lead to complete system compromise. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-6859
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-6859
Vendor advisoryhttps://access.redhat.com/security/cve/CVE-2026-6859

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-41604/ Apache Thrift Out-of-Bounds Read Scores CVSS 8.2 and Is Fixed in Version 0.23.0 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Apache Thrift Out-of-Bounds Read Scores CVSS 8.2 and Is Fixed in Version 0.23.0

Status: UPDATED  |  Advisory ID: CVE-2026-41604

Key Details

CVECVE-2026-41604
CVSS Score / Version
8.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is low; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.92% probability of exploitation in the next 30 days (60% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat AI Inference Server
Red HatRed Hat Enterprise Linux AI (RHEL AI) 3
Red HatRed Hat OpenShift Container Platform 4
ApacheApache Thrift
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.14
Red HatRed Hat Advanced Cluster Management for Kubernetes 2.15
Red HatMulticluster Global Hub 1.3.4
Red HatMulticluster Global Hub 1.4.5
Red HatMulticluster Global Hub 1.6.5
Red HatRed Hat multicluster global hub 1.5.3
Red HatRed Hat OpenShift distributed tracing 3.9.3
Red HatRed Hat OpenShift GitOps
Apachethrift
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Out-of-bounds Read vulnerability in Apache Thrift.

This issue affects Apache Thrift: before 0.23.0.

Users are recommended to upgrade to version 0.23.0, which fixes the issue. (NVD)

What to Do

Monitor Red Hat's and Apache's web pages for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-41604
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-41604

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-28904/ Safari 26.5 Fixes a WebKit Memory Handling Flaw That Can Crash the Process on Crafted Web Content 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Safari 26.5 Fixes a WebKit Memory Handling Flaw That Can Crash the Process on Crafted Web Content

Status: UPDATED  |  Advisory ID: CVE-2026-28904

Key Details

CVECVE-2026-28904
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is none.
Affected products
see table below
Classified as
CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)
Exploitation prediction (EPSS)
0.41% probability of exploitation in the next 30 days (35% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.5, iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected process crash. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-28904
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-28904
Vendor advisoryhttps://support.apple.com/en-us/127110

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-4636/ Keycloak UMA Policy Check Lets a User With the uma_protection Role Reference Resources Owned by Other Users 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Keycloak UMA Policy Check Lets a User With the uma_protection Role Reference Resources Owned by Other Users

Status: UPDATED  |  Advisory ID: CVE-2026-4636

Key Details

CVECVE-2026-4636
CVSS Score / Version
8.1 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
Red Hat Build of Keycloak, Red Hat build of Keycloak 26.2, and Red Hat build of Keycloak 26.4
Classified as
CWE-551 (Incorrect Behavior Order: Authorization Before Parsing and Canonicalization)
Exploitation prediction (EPSS)
0.43% probability of exploitation in the next 30 days (37% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Build of Keycloak
Red HatRed Hat build of Keycloak 26.2
Red HatRed Hat build of Keycloak 26.4
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in Keycloak. An authenticated user with the uma_protection role can bypass User-Managed Access (UMA) policy validation. This allows the attacker to include resource identifiers owned by other users in a policy creation request, even if the URL path specifies an attacker-owned resource. Consequently, the attacker gains unauthorized permissions to victim-owned resources, enabling them to obtain a Requesting Party Token (RPT) and access sensitive information or perform unauthorized actions. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-4636
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-4636
Vendor advisoryhttps://access.redhat.com/errata/RHSA-2026:6475

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2024-36323/ AMD Instinct VCN-JPEG Register Space Isolation Gap Could Let a Malicious Guest VM Access a Victim VM's Data 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AMD Instinct VCN-JPEG Register Space Isolation Gap Could Let a Malicious Guest VM Access a Victim VM's Data

Status: UPDATED  |  Advisory ID: CVE-2024-36323

Key Details

CVECVE-2024-36323
CVSS Score / Version
8.8 (High) / CVSS v4.0
Updated2026-10-27
Affected products
see table below
Classified as
CWE-284 (Improper Access Control)
Exploitation prediction (EPSS)
0.10% probability of exploitation in the next 30 days (1% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
AMDAMD Instinct™ MI308X
AMDAMD Instinct™ MI300A
AMDAMD Instinct™ MI300X
AMDAMD Instinct™ MI325X
AMDAMD Radeon™ RX 7000 Series Graphics Products
AMDAMD Radeon™ PRO W7000 Series Graphics Products
SubsystemsGeneral OT
SectorsMultiple

What to Know

Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space of the JPEG cores assigned a victim VM/process, potentially gaining arbitrary read/write access to the victim VM/process data.

What to Do

Monitor AMD's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2024-36323
CVEhttps://www.cve.org/CVERecord?id=CVE-2024-36323

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-44869/ Command Injection in the AOS-8 and AOS-10 Web Interface Gives an Authenticated Remote Attacker Operating System Command Execution 2026-10-28T00:00:00Z 2026-10-29T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Command Injection in the AOS-8 and AOS-10 Web Interface Gives an Authenticated Remote Attacker Operating System Command Execution

Status: UPDATED  |  Advisory ID: CVE-2026-44869

Key Details

CVECVE-2026-44869
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is high; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos, arubanetworks sd-wan, and Hewlett Packard Enterprise (HPE) HPE Aruba Networking Wireless Operating System (AOS)
Classified as
CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection'))
Exploitation prediction (EPSS)
0.90% probability of exploitation in the next 30 days (59% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
arubanetworkssd-wan
Hewlett Packard Enterprise (HPE)HPE Aruba Networking Wireless Operating System (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

Command injection vulnerabilities exist in the web-based management interface of AOS-8 and AOS-10 Operating Systems. Successful exploitation of these vulnerabilities could allow an authenticated remote attacker to execute arbitrary commands on the underlying operating system. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-44869
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-44869
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05048en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-6746/ Firefox and Thunderbird DOM Core and HTML Use-After-Free Is Fixed in Firefox 150 and ESR 140.10 2026-10-28T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Firefox and Thunderbird DOM Core and HTML Use-After-Free Is Fixed in Firefox 150 and ESR 140.10

Status: UPDATED  |  Advisory ID: CVE-2026-6746

Key Details

CVECVE-2026-6746
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.95% probability of exploitation in the next 30 days (61% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-6746
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-6746
Vendor advisoryhttps://www.mozilla.org/security/advisories/mfsa2026-30/

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-23819/ Unauthenticated Attacker Can Run JavaScript in a Victim's Browser Through the Management Interface of AOS-10 and AOS-8 Instant Access Points 2026-10-28T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Unauthenticated Attacker Can Run JavaScript in a Victim's Browser Through the Management Interface of AOS-10 and AOS-8 Instant Access Points

Status: UPDATED  |  Advisory ID: CVE-2026-23819

Key Details

CVECVE-2026-23819
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is adjacent; attack complexity is low; privileges required is none; user interaction is required; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
arubanetworks arubaos and Hewlett Packard Enterprise (HPE) ArubaOS (AOS)
Classified as
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (19% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
arubanetworksarubaos
Hewlett Packard Enterprise (HPE)ArubaOS (AOS)
SubsystemsGeneral OT
SectorsMultiple

What to Know

A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an unauthenticated remote attacker to execute arbitrary JavaScript code in a victim's browser within the same local network. Successful exploitation could allow an attacker to compromise user data and potentially manipulate device configuration settings. (NVD)

What to Do

Monitor arubanetworks's and Hewlett Packard Enterprise (HPE)'s web pages for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-23819
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-23819
Vendor advisoryhttps://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05049en_us&docLocale=en_US

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-28947/ Safari 26.5 Fixes a WebKit Use-After-Free That Crafted Web Content Can Use to Crash the Browser 2026-10-28T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Safari 26.5 Fixes a WebKit Use-After-Free That Crafted Web Content Can Use to Crash the Browser

Status: UPDATED  |  Advisory ID: CVE-2026-28947

Key Details

CVECVE-2026-28947
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-26
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.38% probability of exploitation in the next 30 days (32% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A use-after-free issue was addressed with improved memory management. This issue is fixed in Safari 26.5, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing maliciously crafted web content may lead to an unexpected Safari crash. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-28947
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-28947
Vendor advisoryhttps://support.apple.com/en-us/127110

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2023-31317/ AMD Secure Processor Memory Bounds Flaw Could Let an Attacker Read or Write Protected Memory on Instinct and Radeon PRO GPUs 2026-10-28T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

AMD Secure Processor Memory Bounds Flaw Could Let an Attacker Read or Write Protected Memory on Instinct and Radeon PRO GPUs

Status: UPDATED  |  Advisory ID: CVE-2023-31317

Key Details

CVECVE-2023-31317
CVSS Score / Version
8.8 (High) / CVSS v4.0
Updated2026-10-28
Affected products
see table below
Classified as
CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
AMDAMD Instinct™ MI250
AMDAMD Instinct™ MI210
AMDAMD Radeon™ RX 7000 Series Graphics Products
AMDAMD Radeon™ PRO W7000 Series Graphics Products
AMDAMD Radeon™ RX 6000 Series Graphics Products
AMDAMD Radeon™ PRO W6000 Series Graphics Products
SubsystemsGeneral OT
SectorsMultiple

What to Know

Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read or write to protected memory potentially resulting in arbitrary code execution.

What to Do

Monitor AMD's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2023-31317
CVEhttps://www.cve.org/CVERecord?id=CVE-2023-31317

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-62752/ Windows Kerberos Heap Overflow Lets an Authorized Local Attacker Elevate Privileges 2026-10-28T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Kerberos Heap Overflow Lets an Authorized Local Attacker Elevate Privileges

Status: UPDATED  |  Advisory ID: CVE-2026-62752

Key Details

CVECVE-2026-62752
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-62752
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-62752
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62752

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-98110/ Linux Kernel Bluetooth btintel Driver Reads Past a Firmware ID That Lacks a NUL Terminator 2026-10-28T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Linux Kernel Bluetooth btintel Driver Reads Past a Firmware ID That Lacks a NUL Terminator

Status: UPDATED  |  Advisory ID: CVE-2026-98110

Key Details

CVECVE-2026-98110
CVSS Score / Version
7.1 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is high.
Affected products
Linux Kernel
Classified as
CWE-125 (Out-of-bounds Read)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
LinuxLinux Kernel
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btintel: bound firmware ID by TLV length

The firmware ID is treated as a NUL-terminated string even though the

TLV length is its only boundary. If the value does not contain a NUL

terminator, snprintf() can read beyond the received response.

Limit the conversion to the advertised TLV value length. (NVD)

What to Do

Monitor Linux's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-98110
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-98110

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-62877/ Windows Win32K Stack Buffer Overflow Lets an Authorized Local Attacker Elevate Privileges Across Windows 10, 11 and Server Releases 2026-10-28T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Win32K Stack Buffer Overflow Lets an Authorized Local Attacker Elevate Privileges Across Windows 10, 11 and Server Releases

Status: UPDATED  |  Advisory ID: CVE-2026-62877

Key Details

CVECVE-2026-62877
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-121 (Stack-based Buffer Overflow)

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftMicrosoft Office 365 for Mac
MicrosoftMicrosoft Office LTSC for Mac 2021
MicrosoftMicrosoft Office LTSC for Mac 2024
MicrosoftMicrosoft Office for Android
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases. See vendor advisory link below.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-62877
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-62877
Vendor advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62877

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-17615/ Red Hat Enterprise Linux 8 RESTEasy's Security Flaw Reachable by Unauthenticated Remote Attackers (CVSS 7.5) 2026-10-03T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Red Hat Enterprise Linux 8 RESTEasy's Security Flaw Reachable by Unauthenticated Remote Attackers (CVSS 7.5)

Status: UPDATED  |  Advisory ID: CVE-2026-17615

Key Details

CVECVE-2026-17615
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is none.
Affected products
see table below
Classified as
CWE-611 (Improper Restriction of XML External Entity Reference)
Exploitation prediction (EPSS)
0.62% probability of exploitation in the next 30 days (49% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
Red HatRed Hat JBoss Enterprise Application Platform Expansion Pack
Red HatRed Hat build of Apache Camel 4 for Quarkus 3
Red HatRed Hat build of Apicurio Registry 3
Red HatRed Hat build of Keycloak 26.6
Red HatRed Hat build of Debezium 3
Red HatRed Hat JBoss Enterprise Application Platform 8
Red HatRed Hat Build of Apache Camel 3.33.3.SP1
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and returns Source or StreamSource, the server can be tricked into resolving the entity and including sensitive file contents in the HTTP response. This is due to the SourceProvider.writeTo() method creating a SAXParser without disabling external entity resolution, leading to an XML External Entity (XXE) vulnerability. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-17615
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-17615

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70153/ Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70153

Key Details

CVECVE-2026-70153
CVSS Score / Version
9.8 (Critical) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.97% probability of exploitation in the next 30 days (61% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70153
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70153

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70149/ Microsoft Windows 11 (version 23H2) Exposes Heap Buffer Overflow to Unauthenticated Network Attackers, Enabling Information Disclosure 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Exposes Heap Buffer Overflow to Unauthenticated Network Attackers, Enabling Information Disclosure

Status: UPDATED  |  Advisory ID: CVE-2026-70149

Key Details

CVECVE-2026-70149
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.84% probability of exploitation in the next 30 days (57% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70149
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70149

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88124/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-88124

Key Details

CVECVE-2026-88124
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88124
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88124

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83579/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83579

Key Details

CVECVE-2026-83579
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83579
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83579

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70156/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70156

Key Details

CVECVE-2026-70156
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70156
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70156

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83508/ Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83508

Key Details

CVECVE-2026-83508
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83508
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83508

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70126/ Microsoft Windows 11 (version 23H2) Improper Input Validation Rated 7.1 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Improper Input Validation Rated 7.1 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70126

Key Details

CVECVE-2026-70126
CVSS Score / Version
7.1 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is adjacent; attack complexity is high; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-20 (Improper Input Validation)
Exploitation prediction (EPSS)
0.47% probability of exploitation in the next 30 days (39% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70126
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70126

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85945/ Windows Windows Kernel Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows Kernel Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85945

Key Details

CVECVE-2026-85945
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.37% probability of exploitation in the next 30 days (29% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85945
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85945

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70136/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70136

Key Details

CVECVE-2026-70136
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70136
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70136

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70115/ Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70115

Key Details

CVECVE-2026-70115
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows 11 (version 24H2), Microsoft Windows 11 (version 25H2), Microsoft Windows 11 (version 26H1), Microsoft Windows Server 2025, and Microsoft Windows 11 Version 26H2
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70115
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70115

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88152/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-88152

Key Details

CVECVE-2026-88152
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.36% probability of exploitation in the next 30 days (28% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88152
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88152

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70286/ Windows Win32k graphics driver Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Win32k graphics driver Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70286

Key Details

CVECVE-2026-70286
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.37% probability of exploitation in the next 30 days (29% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70286
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70286

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-72968/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-72968

Key Details

CVECVE-2026-72968
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-72968
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-72968

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85352/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85352

Key Details

CVECVE-2026-85352
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85352
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85352

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70258/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-70258

Key Details

CVECVE-2026-70258
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.84% probability of exploitation in the next 30 days (57% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70258
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70258

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88134/ Windows Windows Kernel Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows Kernel Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-88134

Key Details

CVECVE-2026-88134
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88134
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88134

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83570/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83570

Key Details

CVECVE-2026-83570
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83570
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83570

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70138/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70138

Key Details

CVECVE-2026-70138
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70138
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70138

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-87693/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-87693

Key Details

CVECVE-2026-87693
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.20% probability of exploitation in the next 30 days (10% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-87693
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-87693

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83843/ Windows IKE/IPsec Out-Of-Bounds Read Reachable by Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows IKE/IPsec Out-Of-Bounds Read Reachable by Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-83843

Key Details

CVECVE-2026-83843
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
1.15% probability of exploitation in the next 30 days (66% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83843
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83843

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83509/ Microsoft Windows 11 (version 23H2) Untrusted Search Path Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Untrusted Search Path Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83509

Key Details

CVECVE-2026-83509
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-426 (Untrusted Search Path)
Exploitation prediction (EPSS)
0.29% probability of exploitation in the next 30 days (21% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83509
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83509

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70157/ Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70157

Key Details

CVECVE-2026-70157
CVSS Score / Version
9.8 (Critical) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.96% probability of exploitation in the next 30 days (61% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70157
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70157

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70158/ Windows Routing and Remote Access Service (RRAS) Double-Free Allows Remote Code Execution 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Routing and Remote Access Service (RRAS) Double-Free Allows Remote Code Execution

Status: UPDATED  |  Advisory ID: CVE-2026-70158

Key Details

CVECVE-2026-70158
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-415 (Double Free)
Exploitation prediction (EPSS)
0.85% probability of exploitation in the next 30 days (57% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70158
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70158

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85362/ Microsoft Windows 11 (version 23H2) Release Of Invalid Pointer Or Reference Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Release Of Invalid Pointer Or Reference Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85362

Key Details

CVECVE-2026-85362
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-763 (Release of Invalid Pointer or Reference)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85362
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85362

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88128/ Windows Desktop Window Manager (DWM) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Desktop Window Manager (DWM) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-88128

Key Details

CVECVE-2026-88128
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88128
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88128

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88107/ Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-88107

Key Details

CVECVE-2026-88107
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
Exploitation prediction (EPSS)
0.16% probability of exploitation in the next 30 days (4% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88107
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88107

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88149/ Windows Winsock Double-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Winsock Double-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-88149

Key Details

CVECVE-2026-88149
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-415 (Double Free)
Exploitation prediction (EPSS)
0.20% probability of exploitation in the next 30 days (10% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88149
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88149

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70207/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.5 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.5 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70207

Key Details

CVECVE-2026-70207
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.66% probability of exploitation in the next 30 days (51% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70207
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70207

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88159/ Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 8.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 8.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-88159

Key Details

CVECVE-2026-88159
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
1.02% probability of exploitation in the next 30 days (63% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88159
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88159

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-98111/ Linux Kernel Bluetooth: btintel: validate version TLV value lengths 2026-10-03T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Linux Kernel Bluetooth: btintel: validate version TLV value lengths

Status: UPDATED  |  Advisory ID: CVE-2026-98111

Key Details

CVECVE-2026-98111
Affected products
Linux Linux

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
LinuxLinux
SubsystemsGeneral OT
SectorsMultiple

What to Know

In the Linux kernel, the following vulnerability has been resolved:

Bluetooth: btintel: validate version TLV value lengths

btintel_parse_version_tlv() verifies that a complete TLV is present in

the response, but it does not ensure that the value is long enough for

the specific TLV type. A short value can therefore cause an

out-of-bounds read through get_unaligned_le16(), get_unaligned_le32(),

or memcpy().

Reject values shorter than the minimum required by each known TLV type.

Also reject responses that do not contain the Command Complete Status

field. (NVD)

What to Do

Monitor Linux's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-98111
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-98111

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85359/ Microsoft Windows 11 (version 23H2) Code Injection Permits Code Injection 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Code Injection Permits Code Injection

Status: UPDATED  |  Advisory ID: CVE-2026-85359

Key Details

CVECVE-2026-85359
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-94 (Improper Control of Generation of Code ('Code Injection'))
Exploitation prediction (EPSS)
0.74% probability of exploitation in the next 30 days (54% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper control of generation of code ('code injection') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85359
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85359

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85342/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85342

Key Details

CVECVE-2026-85342
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85342
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85342

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70210/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-70210

Key Details

CVECVE-2026-70210
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.84% probability of exploitation in the next 30 days (57% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70210
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70210

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88142/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 8.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 8.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-88142

Key Details

CVECVE-2026-88142
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.85% probability of exploitation in the next 30 days (57% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88142
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88142

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70252/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70252

Key Details

CVECVE-2026-70252
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70252
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70252

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70006/ Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-70006

Key Details

CVECVE-2026-70006
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.57% probability of exploitation in the next 30 days (46% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70006
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70006

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70228/ Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70228

Key Details

CVECVE-2026-70228
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.33% probability of exploitation in the next 30 days (24% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70228
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70228

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70278/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70278

Key Details

CVECVE-2026-70278
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70278
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70278

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85366/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85366

Key Details

CVECVE-2026-85366
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85366
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85366

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88157/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-88157

Key Details

CVECVE-2026-88157
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.53% probability of exploitation in the next 30 days (44% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88157
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88157

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83792/ Microsoft Windows 11 (version 23H2) Authorization Bypass Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Authorization Bypass Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83792

Key Details

CVECVE-2026-83792
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-863 (Incorrect Authorization)
Exploitation prediction (EPSS)
0.28% probability of exploitation in the next 30 days (19% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83792
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83792

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70118/ Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70118

Key Details

CVECVE-2026-70118
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows 11 (version 24H2), Microsoft Windows 11 (version 25H2), Microsoft Windows 11 (version 26H1), Microsoft Windows Server 2025, and Microsoft Windows 11 Version 26H2
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70118
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70118

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83634/ Windows BitLocker Double-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows BitLocker Double-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83634

Key Details

CVECVE-2026-83634
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-415 (Double Free)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83634
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83634

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85355/ Microsoft Windows 11 (version 23H2) Inclusion Of Functionality From Untrusted Control Sphere Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Inclusion Of Functionality From Untrusted Control Sphere Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85355

Key Details

CVECVE-2026-85355
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-829 (Inclusion of Functionality from Untrusted Control Sphere)
Exploitation prediction (EPSS)
0.29% probability of exploitation in the next 30 days (20% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85355
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85355

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83789/ Windows Server Message Block (SMB) Heap Buffer Overflow Reachable by Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Server Message Block (SMB) Heap Buffer Overflow Reachable by Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-83789

Key Details

CVECVE-2026-83789
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.77% probability of exploitation in the next 30 days (55% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83789
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83789

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70580/ Microsoft Windows 11 (version 23H2) Authentication Bypass Rated 8.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Authentication Bypass Rated 8.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70580

Key Details

CVECVE-2026-70580
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-306 (Missing Authentication for Critical Function)
Exploitation prediction (EPSS)
0.30% probability of exploitation in the next 30 days (22% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70580
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70580

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83505/ Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83505

Key Details

CVECVE-2026-83505
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition)
Exploitation prediction (EPSS)
0.23% probability of exploitation in the next 30 days (12% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83505
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83505

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88146/ Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-88146

Key Details

CVECVE-2026-88146
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
Exploitation prediction (EPSS)
0.19% probability of exploitation in the next 30 days (8% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88146
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88146

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70123/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70123

Key Details

CVECVE-2026-70123
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.31% probability of exploitation in the next 30 days (22% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70123
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70123

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88118/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-88118

Key Details

CVECVE-2026-88118
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.37% probability of exploitation in the next 30 days (29% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88118
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88118

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85341/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85341

Key Details

CVECVE-2026-85341
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85341
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85341

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83640/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83640

Key Details

CVECVE-2026-83640
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83640
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83640

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83588/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83588

Key Details

CVECVE-2026-83588
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83588
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83588

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88121/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 8.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 8.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-88121

Key Details

CVECVE-2026-88121
CVSS Score / Version
8.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is adjacent; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.49% probability of exploitation in the next 30 days (41% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Background Intelligent Transfer Service (BITS) allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88121
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88121

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88147/ Windows SSTP VPN Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows SSTP VPN Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-88147

Key Details

CVECVE-2026-88147
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol (SSTP) allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88147
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88147

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83584/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83584

Key Details

CVECVE-2026-83584
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83584
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83584

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83842/ Windows Windows TCP/IP stack Double-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows TCP/IP stack Double-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83842

Key Details

CVECVE-2026-83842
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-415 (Double Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83842
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83842

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85358/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85358

Key Details

CVECVE-2026-85358
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85358
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85358

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83566/ Windows Win32k graphics driver Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Win32k graphics driver Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83566

Key Details

CVECVE-2026-83566
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows 11 (version 24H2), Microsoft Windows 11 (version 25H2), Microsoft Windows 11 (version 26H1), Microsoft Windows Server 2025, and Microsoft Windows 11 Version 26H2
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83566
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83566

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-78459/ Windows IIS Web Server Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows IIS Web Server Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-78459

Key Details

CVECVE-2026-78459
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.33% probability of exploitation in the next 30 days (24% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-78459
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-78459

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88113/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-88113

Key Details

CVECVE-2026-88113
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.20% probability of exploitation in the next 30 days (10% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88113
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88113

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83510/ Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83510

Key Details

CVECVE-2026-83510
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-367 (Time-of-check Time-of-use (TOCTOU) Race Condition)
Exploitation prediction (EPSS)
0.21% probability of exploitation in the next 30 days (11% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83510
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83510

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70134/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70134

Key Details

CVECVE-2026-70134
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70134
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70134

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85364/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85364

Key Details

CVECVE-2026-85364
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85364
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85364

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70229/ Windows Active Directory Authorization Bypass Reachable by Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Active Directory Authorization Bypass Reachable by Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-70229

Key Details

CVECVE-2026-70229
CVSS Score / Version
8.1 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-863 (Incorrect Authorization)
Exploitation prediction (EPSS)
0.71% probability of exploitation in the next 30 days (53% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70229
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70229

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-72934/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-72934

Key Details

CVECVE-2026-72934
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-72934
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-72934

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85357/ Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85357

Key Details

CVECVE-2026-85357
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
Exploitation prediction (EPSS)
0.19% probability of exploitation in the next 30 days (8% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Phone Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85357
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85357

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70274/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70274

Key Details

CVECVE-2026-70274
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70274
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70274

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70212/ Microsoft Windows 11 (version 23H2) Improper Restriction Of Communication Channel To Intended Endpoints Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Improper Restriction Of Communication Channel To Intended Endpoints Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70212

Key Details

CVECVE-2026-70212
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-923 (Improper Restriction of Communication Channel to Intended Endpoints)
Exploitation prediction (EPSS)
0.24% probability of exploitation in the next 30 days (14% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70212
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70212

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85353/ Windows Print Spooler Out-Of-Bounds Read Reachable by Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Print Spooler Out-Of-Bounds Read Reachable by Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-85353

Key Details

CVECVE-2026-85353
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is none; availability impact is none.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
1.00% probability of exploitation in the next 30 days (62% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85353
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85353

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70275/ Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-70275

Key Details

CVECVE-2026-70275
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-822 (Untrusted Pointer Dereference)
Exploitation prediction (EPSS)
0.84% probability of exploitation in the next 30 days (57% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70275
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70275

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70131/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70131

Key Details

CVECVE-2026-70131
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.44% probability of exploitation in the next 30 days (37% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70131
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70131

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70150/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70150

Key Details

CVECVE-2026-70150
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70150
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70150

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70147/ Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70147

Key Details

CVECVE-2026-70147
CVSS Score / Version
9.8 (Critical) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.97% probability of exploitation in the next 30 days (61% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70147
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70147

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-87702/ Microsoft Windows 11 (version 23H2) Integer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Integer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-87702

Key Details

CVECVE-2026-87702
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-190 (Integer Overflow or Wraparound)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-87702
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-87702

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-87691/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-87691

Key Details

CVECVE-2026-87691
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.24% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-87691
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-87691

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70132/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70132

Key Details

CVECVE-2026-70132
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.36% probability of exploitation in the next 30 days (28% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70132
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70132

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-87708/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-87708

Key Details

CVECVE-2026-87708
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-87708
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-87708

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-87705/ Windows Hyper-V Signature Verification Bypass Rated 7.4 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Hyper-V Signature Verification Bypass Rated 7.4 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-87705

Key Details

CVECVE-2026-87705
CVSS Score / Version
7.4 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS Prose
attack vector is adjacent; attack complexity is low; privileges required is none; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is none; availability impact is none.
Affected products
see table below
Classified as
CWE-940 (Improper Verification of Source of a Communication Channel)
Exploitation prediction (EPSS)
0.35% probability of exploitation in the next 30 days (27% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-87705
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-87705

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85343/ Windows Hyper-V Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Hyper-V Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85343

Key Details

CVECVE-2026-85343
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-59 (Improper Link Resolution Before File Access ('Link Following'))
Exploitation prediction (EPSS)
0.35% probability of exploitation in the next 30 days (27% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85343
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85343

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70272/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70272

Key Details

CVECVE-2026-70272
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70272
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70272

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-77496/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-77496

Key Details

CVECVE-2026-77496
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.84% probability of exploitation in the next 30 days (57% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-77496
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-77496

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70133/ Windows Server Message Block (SMB) Allocation Of Resources Without Limits Or Throttling Reachable by Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Server Message Block (SMB) Allocation Of Resources Without Limits Or Throttling Reachable by Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-70133

Key Details

CVECVE-2026-70133
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-770 (Allocation of Resources Without Limits or Throttling)
Exploitation prediction (EPSS)
1.15% probability of exploitation in the next 30 days (66% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Allocation of resources without limits or throttling in Windows SMB Server allows an unauthorized attacker to deny service over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70133
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70133

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70262/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-70262

Key Details

CVECVE-2026-70262
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.84% probability of exploitation in the next 30 days (57% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70262
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70262

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85361/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85361

Key Details

CVECVE-2026-85361
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85361
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85361

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70151/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70151

Key Details

CVECVE-2026-70151
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.36% probability of exploitation in the next 30 days (28% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70151
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70151

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85936/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-85936

Key Details

CVECVE-2026-85936
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.56% probability of exploitation in the next 30 days (45% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Double free in Windows Shell allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85936
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85936

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85356/ Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85356

Key Details

CVECVE-2026-85356
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85356
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85356

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83790/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83790

Key Details

CVECVE-2026-83790
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83790
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83790

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83585/ Microsoft Windows 11 (version 23H2) Format String Vulnerability Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Format String Vulnerability Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83585

Key Details

CVECVE-2026-83585
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-134 (Use of Externally-Controlled Format String)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83585
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83585

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-73027/ Microsoft Windows 11 (version 23H2) External Control Of System Or Configuration Setting Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) External Control Of System Or Configuration Setting Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-73027

Key Details

CVECVE-2026-73027
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-15 (External Control of System or Configuration Setting)
Exploitation prediction (EPSS)
0.36% probability of exploitation in the next 30 days (29% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-73027
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-73027

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83567/ Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83567

Key Details

CVECVE-2026-83567
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83567
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83567

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85934/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85934

Key Details

CVECVE-2026-85934
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85934
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85934

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83791/ Microsoft Windows 11 (version 23H2) Unverified Ownership Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Unverified Ownership Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83791

Key Details

CVECVE-2026-83791
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-283 (Unverified Ownership)
Exploitation prediction (EPSS)
0.28% probability of exploitation in the next 30 days (19% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83791
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83791

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88106/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-88106

Key Details

CVECVE-2026-88106
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.20% probability of exploitation in the next 30 days (10% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88106
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88106

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83574/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83574

Key Details

CVECVE-2026-83574
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83574
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83574

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85354/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85354

Key Details

CVECVE-2026-85354
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85354
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85354

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-81971/ Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-81971

Key Details

CVECVE-2026-81971
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
Exploitation prediction (EPSS)
0.21% probability of exploitation in the next 30 days (11% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-81971
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-81971

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-72969/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-72969

Key Details

CVECVE-2026-72969
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-72969
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-72969

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70566/ Windows SChannel TLS Null Pointer Dereference Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows SChannel TLS Null Pointer Dereference Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70566

Key Details

CVECVE-2026-70566
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-476 (NULL Pointer Dereference)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70566
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70566

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83568/ Windows Windows Kernel Authorization Bypass Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows Kernel Authorization Bypass Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83568

Key Details

CVECVE-2026-83568
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows 11 (version 24H2), Microsoft Windows 11 (version 25H2), Microsoft Windows 11 (version 26H1), Microsoft Windows Server 2025, and Microsoft Windows 11 Version 26H2
Classified as
CWE-862 (Missing Authorization)
Exploitation prediction (EPSS)
0.30% probability of exploitation in the next 30 days (22% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83568
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83568

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85367/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85367

Key Details

CVECVE-2026-85367
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85367
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85367

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83638/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83638

Key Details

CVECVE-2026-83638
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83638
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83638

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-72955/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-72955

Key Details

CVECVE-2026-72955
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.28% probability of exploitation in the next 30 days (19% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Application Compatibility Cache allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-72955
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-72955

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85933/ Windows Print Spooler Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Print Spooler Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85933

Key Details

CVECVE-2026-85933
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.24% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85933
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85933

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70140/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70140

Key Details

CVECVE-2026-70140
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70140
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70140

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83506/ Microsoft Windows 11 (version 23H2) Untrusted Search Path Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Untrusted Search Path Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83506

Key Details

CVECVE-2026-83506
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-426 (Untrusted Search Path)
Exploitation prediction (EPSS)
0.36% probability of exploitation in the next 30 days (29% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83506
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83506

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85941/ Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85941

Key Details

CVECVE-2026-85941
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
Exploitation prediction (EPSS)
0.21% probability of exploitation in the next 30 days (10% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85941
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85941

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88133/ Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-88133

Key Details

CVECVE-2026-88133
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-59 (Improper Link Resolution Before File Access ('Link Following'))
Exploitation prediction (EPSS)
0.41% probability of exploitation in the next 30 days (34% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88133
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88133

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-87700/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-87700

Key Details

CVECVE-2026-87700
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.24% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-87700
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-87700

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-87704/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-87704

Key Details

CVECVE-2026-87704
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.20% probability of exploitation in the next 30 days (10% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-87704
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-87704

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85339/ Windows Routing and Remote Access Service (RRAS) Heap Buffer Overflow Allows Unauthenticated Remote Remote Code Execution 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Routing and Remote Access Service (RRAS) Heap Buffer Overflow Allows Unauthenticated Remote Remote Code Execution

Status: UPDATED  |  Advisory ID: CVE-2026-85339

Key Details

CVECVE-2026-85339
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.56% probability of exploitation in the next 30 days (45% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85339
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85339

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70139/ Windows Windows Update Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows Update Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70139

Key Details

CVECVE-2026-70139
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70139
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70139

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83639/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83639

Key Details

CVECVE-2026-83639
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83639
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83639

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83575/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83575

Key Details

CVECVE-2026-83575
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83575
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83575

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83793/ Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Improper Link Resolution Before File Access ('Link Following') Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-83793

Key Details

CVECVE-2026-83793
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-59 (Improper Link Resolution Before File Access ('Link Following'))
Exploitation prediction (EPSS)
0.29% probability of exploitation in the next 30 days (20% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83793
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83793

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70255/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70255

Key Details

CVECVE-2026-70255
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.36% probability of exploitation in the next 30 days (28% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70255
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70255

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-83511/ Windows Active Directory Weak Authentication Reachable by Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Active Directory Weak Authentication Reachable by Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-83511

Key Details

CVECVE-2026-83511
CVSS Score / Version
7.4 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is none.
Affected products
see table below
Classified as
CWE-1390 (Weak Authentication)
Exploitation prediction (EPSS)
0.59% probability of exploitation in the next 30 days (47% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Weak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-83511
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-83511

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-69763/ Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-69763

Key Details

CVECVE-2026-69763
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
Exploitation prediction (EPSS)
0.21% probability of exploitation in the next 30 days (10% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-69763
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-69763

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70184/ Microsoft Windows 11 (version 23H2) Improper Resolution Of Path Equivalence Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Improper Resolution Of Path Equivalence Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70184

Key Details

CVECVE-2026-70184
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-41 (Improper Resolution of Path Equivalence)
Exploitation prediction (EPSS)
0.38% probability of exploitation in the next 30 days (30% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70184
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70184

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70048/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70048

Key Details

CVECVE-2026-70048
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70048
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70048

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70237/ Windows Winsock Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Winsock Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70237

Key Details

CVECVE-2026-70237
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.29% probability of exploitation in the next 30 days (20% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70237
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70237

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70164/ Windows Windows TCP/IP stack Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows TCP/IP stack Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70164

Key Details

CVECVE-2026-70164
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70164
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70164

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70230/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70230

Key Details

CVECVE-2026-70230
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70230
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70230

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70223/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70223

Key Details

CVECVE-2026-70223
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.28% probability of exploitation in the next 30 days (19% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Console Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70223
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70223

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70205/ Windows Winsock Type Confusion Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Winsock Type Confusion Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70205

Key Details

CVECVE-2026-70205
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-843 (Access of Resource Using Incompatible Type ('Type Confusion'))
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70205
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70205

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70163/ Microsoft Windows 11 (version 23H2) Allocation Of Resources Without Limits Or Throttling Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Allocation Of Resources Without Limits Or Throttling Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-70163

Key Details

CVECVE-2026-70163
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-770 (Allocation of Resources Without Limits or Throttling)
Exploitation prediction (EPSS)
1.10% probability of exploitation in the next 30 days (65% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70163
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70163

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-108399/ Windows Hyper-V Heap Buffer Overflow Rated 7.2 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Hyper-V Heap Buffer Overflow Rated 7.2 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-108399

Key Details

CVECVE-2026-108399
CVSS Score / Version
7.2 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is high; user interaction is required; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-108399
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-108399

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70086/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70086

Key Details

CVECVE-2026-70086
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70086
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70086

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70056/ Windows Windows Update Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows Update Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70056

Key Details

CVECVE-2026-70056
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70056
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70056

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70233/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70233

Key Details

CVECVE-2026-70233
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.37% probability of exploitation in the next 30 days (29% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70233
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70233

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85928/ Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Unauthenticated Remote Heap Buffer Overflow in Microsoft Windows 11 (version 23H2) Rates 9.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85928

Key Details

CVECVE-2026-85928
CVSS Score / Version
9.8 (Critical) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.65% probability of exploitation in the next 30 days (50% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85928
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85928

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70062/ Microsoft Windows 11 (version 23H2) Double-Free Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Double-Free Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-70062

Key Details

CVECVE-2026-70062
CVSS Score / Version
8.1 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is high; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-415 (Double Free)
Exploitation prediction (EPSS)
0.69% probability of exploitation in the next 30 days (52% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70062
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70062

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88110/ Microsoft Windows 11 (version 24H2) Heap Buffer Overflow Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 24H2) Heap Buffer Overflow Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-88110

Key Details

CVECVE-2026-88110
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows 11 (version 24H2), Microsoft Windows 11 (version 25H2), Microsoft Windows Server 2025, and Microsoft Windows 11 Version 26H2
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88110
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88110

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-96862/ Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-96862

Key Details

CVECVE-2026-96862
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-96862
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-96862

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85908/ Windows Win32k graphics driver Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Win32k graphics driver Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85908

Key Details

CVECVE-2026-85908
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.36% probability of exploitation in the next 30 days (28% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85908
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85908

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70172/ Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Untrusted Pointer Dereference Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70172

Key Details

CVECVE-2026-70172
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-822 (Untrusted Pointer Dereference)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70172
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70172

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70218/ Microsoft Windows 11 (version 24H2) Authorization Bypass Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 24H2) Authorization Bypass Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70218

Key Details

CVECVE-2026-70218
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows 11 (version 24H2), Microsoft Windows 11 (version 25H2), Microsoft Windows 11 (version 26H1), and Microsoft Windows 11 Version 26H2
Classified as
CWE-285 (Improper Authorization)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70218
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70218

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70247/ Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Out-Of-Bounds Read Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70247

Key Details

CVECVE-2026-70247
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.31% probability of exploitation in the next 30 days (22% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70247
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70247

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88127/ Windows Server Message Block (SMB) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Server Message Block (SMB) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-88127

Key Details

CVECVE-2026-88127
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88127
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88127

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70051/ Microsoft Windows 11 (version 23H2) Type Confusion Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Type Confusion Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70051

Key Details

CVECVE-2026-70051
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-843 (Access of Resource Using Incompatible Type ('Type Confusion'))
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Access of resource using incompatible type ('type confusion') in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70051
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70051

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70143/ Windows NFS client Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows NFS client Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70143

Key Details

CVECVE-2026-70143
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70143
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70143

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88139/ Windows Windows Kernel Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows Kernel Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-88139

Key Details

CVECVE-2026-88139
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows 11 (version 24H2), Microsoft Windows 11 (version 25H2), Microsoft Windows 11 (version 26H1), Microsoft Windows Server 2025, and Microsoft Windows 11 Version 26H2
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.20% probability of exploitation in the next 30 days (10% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88139
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88139

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85369/ Windows Hyper-V Out-Of-Bounds Read Rated 8.2 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Hyper-V Out-Of-Bounds Read Rated 8.2 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85369

Key Details

CVECVE-2026-85369
CVSS Score / Version
8.2 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is high; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)
0.33% probability of exploitation in the next 30 days (25% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85369
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85369

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70059/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70059

Key Details

CVECVE-2026-70059
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70059
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70059

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70142/ Microsoft Windows 11 (version 23H2) Untrusted Search Path Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Untrusted Search Path Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70142

Key Details

CVECVE-2026-70142
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-426 (Untrusted Search Path)
Exploitation prediction (EPSS)
0.36% probability of exploitation in the next 30 days (29% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70142
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70142

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70068/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Exposed to Unauthenticated Network Attackers

Status: UPDATED  |  Advisory ID: CVE-2026-70068

Key Details

CVECVE-2026-70068
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.84% probability of exploitation in the next 30 days (57% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an unauthorized attacker to elevate privileges over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70068
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70068

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70169/ Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Race Condition Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70169

Key Details

CVECVE-2026-70169
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-362 (Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'))
Exploitation prediction (EPSS)
0.19% probability of exploitation in the next 30 days (8% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Connected Devices Platform Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70169
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70169

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-69650/ Microsoft Windows 11 (version 24H2) Signature Verification Bypass Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 24H2) Signature Verification Bypass Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-69650

Key Details

CVECVE-2026-69650
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-347 (Improper Verification of Cryptographic Signature)
Exploitation prediction (EPSS)
0.23% probability of exploitation in the next 30 days (13% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-69650
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-69650

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70064/ Windows Kerberos Integer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Kerberos Integer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70064

Key Details

CVECVE-2026-70064
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-191 (Integer Underflow (Wrap or Wraparound))
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Integer underflow (wrap or wraparound) in Windows Kerberos allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70064
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70064

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70225/ Windows Winsock Type Confusion Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Winsock Type Confusion Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70225

Key Details

CVECVE-2026-70225
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-843 (Access of Resource Using Incompatible Type ('Type Confusion'))
Exploitation prediction (EPSS)
0.34% probability of exploitation in the next 30 days (26% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70225
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70225

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-105733/ Windows Hyper-V Vulnerability Rated 8.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Hyper-V Vulnerability Rated 8.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-105733

Key Details

CVECVE-2026-105733
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Exploitation prediction (EPSS)
0.33% probability of exploitation in the next 30 days (25% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-105733
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-105733

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-69743/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-69743

Key Details

CVECVE-2026-69743
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-69743
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-69743

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70076/ Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 24H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70076

Key Details

CVECVE-2026-70076
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows 11 (version 24H2), Microsoft Windows 11 (version 25H2), Microsoft Windows 11 (version 26H1), Microsoft Windows Server 2025, and Microsoft Windows 11 Version 26H2
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.30% probability of exploitation in the next 30 days (21% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70076
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70076

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-88141/ Windows Windows Kernel Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows Kernel Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-88141

Key Details

CVECVE-2026-88141
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.25% probability of exploitation in the next 30 days (15% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-88141
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-88141

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85931/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 8.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 8.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85931

Key Details

CVECVE-2026-85931
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.85% probability of exploitation in the next 30 days (57% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85931
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85931

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85905/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 8.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 8.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85905

Key Details

CVECVE-2026-85905
CVSS Score / Version
8.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is changed; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85905
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85905

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85906/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85906

Key Details

CVECVE-2026-85906
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.28% probability of exploitation in the next 30 days (19% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85906
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85906

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70060/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70060

Key Details

CVECVE-2026-70060
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.38% probability of exploitation in the next 30 days (30% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70060
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70060

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-94640/ rpcbind Crashes Under Large Unauthenticated Requests, Letting a Remote Attacker Deny RPC Services to Dependent Applications 2026-10-10T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

rpcbind Crashes Under Large Unauthenticated Requests, Letting a Remote Attacker Deny RPC Services to Dependent Applications

Status: UPDATED  |  Advisory ID: CVE-2026-94640

Key Details

CVECVE-2026-94640
CVSS Score / Version
7.5 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products
see table below
Classified as
CWE-400 (Uncontrolled Resource Consumption)
Exploitation prediction (EPSS)
0.35% probability of exploitation in the next 30 days (27% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
Red HatRed Hat Enterprise Linux 10
Red HatRed Hat Enterprise Linux 8
Red HatRed Hat Enterprise Linux 9
Red HatRed Hat Enterprise Linux 7
Red HatRed Hat OpenShift Container Platform 4
Red HatRed Hat Enterprise Linux 6
SubsystemsOT Supporting Infrastructure
SectorsMultiple

What to Know

A flaw was found in rpcbind. This vulnerability allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) by sending a large number of unique requests. The rpcbind service records previously unseen RPC (Remote Procedure Call) statistics in unbounded in-memory lists, leading to persistent memory growth and increased CPU usage. This can degrade or exhaust service availability. (NVD)

What to Do

Monitor Red Hat's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-94640
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-94640

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85930/ Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Use-After-Free Rated 7.0 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85930

Key Details

CVECVE-2026-85930
CVSS Score / Version
7.0 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is high; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.20% probability of exploitation in the next 30 days (10% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2022
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85930
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85930

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-108130/ Microsoft Windows 11 (version 24H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 24H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-108130

Key Details

CVECVE-2026-108130
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Microsoft Windows 11 (version 24H2), Microsoft Windows 11 (version 25H2), Microsoft Windows 11 (version 26H1), Microsoft Windows Server 2025, and Microsoft Windows 11 Version 26H2
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.33% probability of exploitation in the next 30 days (25% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-108130
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-108130

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70054/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70054

Key Details

CVECVE-2026-70054
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.41% probability of exploitation in the next 30 days (34% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70054
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70054

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70238/ Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70238

Key Details

CVECVE-2026-70238
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70238
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70238

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-70177/ Microsoft Windows 11 (version 23H2) Improper Input Validation Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Microsoft Windows 11 (version 23H2) Improper Input Validation Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-70177

Key Details

CVECVE-2026-70177
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-20 (Improper Input Validation)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-70177
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-70177

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]> https://ot-advisories.com/advisories/CVE-2026-85368/ Windows Windows TCP/IP stack Heap Buffer Overflow Rated 7.8 CVSS 2026-10-15T00:00:00Z 2026-10-28T00:00:00Z :root{ --bg:#eef0f2; --surface:#ffffff; --border:#8a9099; --header-blue:#d7e0ec; --header-pink:#f3d7d2; --text:#111417; --text-dim:#54595f; --heading:#1a4c8b; --heading-kev:#8a2e10; --placeholder:#7a7f85; --code-bg:#e8ebee; --arb-gold:#c07800; --arb-teal:#1a7a6e; color-scheme: light; } @media (prefers-color-scheme: dark){ :root:not([data-theme="light"]){ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } } :root[data-theme="dark"]{ --bg:#16181a; --surface:#1e2124; --border:#53585e; --header-blue:#28364a; --header-pink:#4a2e2a; --text:#e8e9ea; --text-dim:#a7acb1; --heading:#6fa3e0; --heading-kev:#e08a63; --placeholder:#8a8f95; --code-bg:#282b2e; --arb-gold:#e8a020; --arb-teal:#30c8b8; color-scheme: dark; } *{box-sizing:border-box;} body{ background:var(--bg); color:var(--text); font-family:Georgia,'Times New Roman',serif; padding-inline:16px; padding-block:40px; line-height:1.5; margin:0; } .sheet{ max-width:800px; margin-inline:auto; background:var(--surface); border:1px solid var(--border); padding:32px clamp(18px,5vw,48px) 44px; } .sheet-header{ display:flex; justify-content:space-between; align-items:flex-start; gap:16px; margin-bottom:10px; } .sheet-header h1{ margin-bottom:0; flex:1; min-width:0; } .last-refreshed{ font-size:11px; color:var(--text-dim); text-align:right; white-space:nowrap; flex-shrink:0; line-height:1.6; padding-top:4px; } .last-refreshed strong{ display:block; font-size:10px; text-transform:uppercase; letter-spacing:0.5px; } h1{ font-size:clamp(22px,3.2vw,28px); line-height:1.3; margin:0 0 10px; text-wrap:balance; } .statusline{ font-size:14px; color:var(--text-dim); margin:0 0 26px; padding-bottom:14px; border-bottom:2px solid var(--border); } h2{ font-size:18px; font-weight:700; color:var(--heading); margin:30px 0 6px; } h2.kev{ color:var(--heading-kev); } table{ width:100%; border-collapse:collapse; font-size:14px; margin-bottom:6px; } th, td{ border:1px solid var(--border); padding:8px 10px; text-align:left; vertical-align:top; } .field-table td:first-child{ width:220px; font-weight:700; } .headered th{ font-weight:700; } .header-blue th{ background:var(--header-blue); } .header-pink th{ background:var(--header-pink); } a{ color:var(--heading); } code{ background:var(--code-bg); padding:1px 5px; border-radius:3px; font-size:0.92em; font-family:ui-monospace,Menlo,Consolas,monospace; } .report-masthead{ font-size:12px; color:var(--text-dim); border-bottom:1px solid var(--border); padding:14px 0 12px; margin-bottom:28px; text-align:center; } .report-masthead a{ color:var(--heading); text-decoration:none; font-weight:700; font-style:normal; } .about-footer{ font-size:12px; color:var(--text-dim); text-align:center; margin-top:32px; padding-top:16px; border-top:1px solid var(--border); } .about-footer h2{ margin:0 0 10px; } .about-footer a{ color:var(--text-dim); text-decoration:none; } .about-footer a:hover{ color:var(--text); } .report-attribution{ font-size:11px; color:var(--text-dim); text-align:center; margin-top:12px; padding-top:12px; border-top:1px solid var(--border); line-height:1.6; } .report-attribution a{ color:var(--text-dim); } .val{display:flex;align-items:flex-start;justify-content:space-between;gap:8px} .vt{flex:1;min-width:0} .vm{flex-shrink:0;padding-top:1px} a.ar-badge{ display:inline-flex;align-items:center;justify-content:center; width:12px;height:11px;border-radius:2px;flex-shrink:0; border:1px solid var(--border);background:var(--surface); cursor:pointer;text-decoration:none;position:relative; transition:border-color .15s; } a.ar-badge:hover{border-color:var(--arb-gold)} a.ar-badge::after{ content:'View source'; position:absolute;bottom:calc(100% + 5px);right:0; background:#111417;color:#e8e9ea; padding:3px 7px;border-radius:3px; font-family:ui-monospace,Menlo,Consolas,monospace; font-size:10px;white-space:nowrap; opacity:0;pointer-events:none;transition:opacity .15s;z-index:10; } a.ar-badge:hover::after{opacity:1} a.ar-badge--about::after{content:'Attributable Research Badge™'}
Reported from OT-Advisories.com as of

Windows Windows TCP/IP stack Heap Buffer Overflow Rated 7.8 CVSS

Status: UPDATED  |  Advisory ID: CVE-2026-85368

Key Details

CVECVE-2026-85368
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-28
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
see table below
Classified as
CWE-122 (Heap-based Buffer Overflow)
Exploitation prediction (EPSS)
0.32% probability of exploitation in the next 30 days (23% percentile) -- FIRST.org's EPSS model.

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
MicrosoftWindows 11 (version 23H2)
MicrosoftWindows 11 (version 24H2)
MicrosoftWindows 11 (version 25H2)
MicrosoftWindows 11 (version 26H1)
MicrosoftWindows Server 2025
MicrosoftWindows 10 (version 1607)
MicrosoftWindows 10 (version 1809)
MicrosoftWindows 10 (version 21H2)
MicrosoftWindows 10 (version 22H2)
MicrosoftWindows Server 2012
MicrosoftWindows Server 2016
MicrosoftWindows Server 2019
MicrosoftWindows Server 2022
MicrosoftWindows Server 2012 R2
MicrosoftWindows 11 Version 26H2
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

What to Do

Monitor Microsoft's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-85368
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-85368

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.
]]>