PULSEUnderground Intel

AO VIVO25sinais / 24h

FEED

ransomqilin reclama a Acondistec · DE · Manufacturingransomanubis reclama a Kahler Automation · DE · Manufacturingransomsilentransomgroup reclama a Benesch Law · US · Professional Servicesransomincransom reclama a 1da9100e55aqf21eb651eNea · ALransombraincipher reclama a Mutares.com · DE · Manufacturingransomgenesis reclama a Xinos Construction · US · Manufacturingransomgenesis reclama a Insation Technologies · US · Technologyransomeclipse reclama a Comercial en Fletes México, S.A. de C.V. · MX · Transportationransomincransom reclama a https://www.sleep-clinic.ca/ · CA · Healthcareransomsilentransomgroup reclama a Tucker Ellis · US · Professional Servicesransomsilentransomgroup reclama a Wachtell, Lipton, Rosen & Katz · US · Professional Servicesransomsilentransomgroup reclama a B... law · Professional Servicesransomakira reclama a Ligne Roset · FR · Retail & E-Commerceransomakira reclama a Houston Machine and Thread · US · Manufacturingransomqilin reclama a Acondistec · DE · Manufacturingransomanubis reclama a Kahler Automation · DE · Manufacturingransomsilentransomgroup reclama a Benesch Law · US · Professional Servicesransomincransom reclama a 1da9100e55aqf21eb651eNea · ALransombraincipher reclama a Mutares.com · DE · Manufacturingransomgenesis reclama a Xinos Construction · US · Manufacturingransomgenesis reclama a Insation Technologies · US · Technologyransomeclipse reclama a Comercial en Fletes México, S.A. de C.V. · MX · Transportationransomincransom reclama a https://www.sleep-clinic.ca/ · CA · Healthcareransomsilentransomgroup reclama a Tucker Ellis · US · Professional Servicesransomsilentransomgroup reclama a Wachtell, Lipton, Rosen & Katz · US · Professional Servicesransomsilentransomgroup reclama a B... law · Professional Servicesransomakira reclama a Ligne Roset · FR · Retail & E-Commerceransomakira reclama a Houston Machine and Thread · US · Manufacturing

← Todos os CVEs

CVE Watch28 de out. de 2026

CVE-2026-72968

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVSS

7.0

Alta

EPSS

0.3%

p23

KEV

—

Exploit Today

7

0-100

Publicado: 13 de out. de 2026 · Última mod.: 28 de out. de 2026 · CWE-416

EPSS · 30d

0.3%EPSS · 30 dias0.3%

2026-10-142026-11-06

Descrição técnica

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

Referências oficiais

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-72968

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-1240408.1 ALT

——0CivetWeb through 1.16, when built with USE_HTTP2 and enable_http2 on, contains a use-after-free vulnerability in handle_http2() that retains freed :method and :path pointers. Unauthenticated remote attackers can send a later HEADERS frame omitting these pseudo-headers to influence request method or path seen by access rules, or crash the server.10h CVE-2026-934247.5 ALT

——6FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, peer_find_template() in src/netflow_plugin/netflow_collector.cpp and src/netflow_plugin/netflow_v9_collector.cpp returns a pointer into global_netflow9_templates after releasing the cache mutex. On deployments with at least two entries in netflow_ports, concurrent template redefinition and data-flowset processing can let add_update_peer_template() reassign the template and free its records vector while another listener dereferences the escaped pointer. An unauthenticated sender that can reach both NetFlow/IPFIX listener ports can trigger a heap-use-after-free and reliably crash FastNetMon. No fixed release is available as of this review.1d CVE-2026-69044—

——1In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.9h CVE-2026-69043—

——1In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory corruption9h CVE-2026-824189.8 CRÍ

——12IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability.2d CVE-2026-1219635.9 MÉD

——7FreeRDP before 3.32.2 contains a use-after-free vulnerability in the asynchronous dynamic rdpsnd channel that allows malicious RDP servers to trigger freed callback access by closing the channel with queued audio PDUs. Attackers can send a training PDU then close the channel so the playback thread reads the freed callback in rdpsnd_virtual_channel_write, crashing the client.1d