PT-2026-87563

Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...

CVE-2026-69554: Missing Authentication for Critical Function

Missing authentication for critical function in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...

CVE-2026-69305: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...

PT-2026-87782

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

PT-2026-87610

Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

PT-2026-87184

A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function member list of the file controllers/member.php. This manipulation of the argument Search causes sql injection. The attack is possible to be carried out remotely. The exploit has been made...

PT-2026-87310

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description An absolute path traversal issue exists in the Microsoft Windows Search Component. This flaw allows an authorized attacker to elevate privileges locally on the...

PT-2026-88469

Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...

CVE-2026-80159: Untrusted Search Path

Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...

CVE-2026-78574: Untrusted Search Path

The Okta Hyperdrive Integration plugin resolves a required assembly using a registry path within the current user's hive without integrity verification. The referenced path is loaded via Assembly.LoadFrom without signature validation, resulting in an unverified assembly executing within the conte...

CVE-2026-69911: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-69785: Untrusted Search Path

Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...

CVE-2026-69328: Untrusted Search Path

Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-69600: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

PT-2026-87366

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...

PT-2026-88431

Name of the Vulnerable Software and Affected Versions Okta Access Gateway affected versions not specified Description The software fails to sanitize SAML assertion attribute values before they are interpolated into LDAP search filters within the LDAP datastore configuration. Because raw values ar...

PT-2026-87891

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...

CVE-2026-78579: Improper Neutralization of Special Elements used in an LDAP Query

The Okta Access Gateway does not sanitize SAML assertion attribute values before interpolating them into LDAP search filters in the LDAP datastore configuration. The raw values are substituted directly into the filter string and passed to the LDAP search operation, resulting in modification of th...

PT-2026-88312

Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that...

CVE-2026-77827: Unquoted Search Path or Element

Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:\ProgramData\Maono'. Fixed in 4.0.80...