CVE-2026-69991: Use After Free

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

PT-2026-112122

Name of the Vulnerable Software and Affected Versions Windows Client for NFS affected versions not specified Description An out-of-bounds read occurs in the Windows Client for NFS, which allows an unauthorized attacker to disclose sensitive information over a network and affect the system. An...

CVE-2026-70149: Heap-based Buffer Overflow

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...

VulnCheck KEV: CVE-2026-15015

The MountDev AI MCP Connector for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.6.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers...

PT-2026-112700

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description Incorrect authorization in the Windows SMB Client allows an authorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information about a...

PT-2026-112437

Name of the Vulnerable Software and Affected Versions Windows Client-Side Caching CSC Service affected versions not specified Description A heap-based buffer overflow in the Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally. A heap-based buffer...

CVE-2026-70113: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69949: Windows Client for NFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally...

PT-2026-112112

Name of the Vulnerable Software and Affected Versions Windows Client for NFS affected versions not specified Description An out-of-bounds read occurs in the Windows Client for NFS, which allows an unauthorized attacker to disclose sensitive information over a network and affect the system. An...

PT-2026-112117

Name of the Vulnerable Software and Affected Versions Windows Client for NFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Client for NFS. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer...

PT-2026-111868

Name of the Vulnerable Software and Affected Versions Distribution versions prior to 3.1.2 Description The registry/client.manifests.Get function reads a manifest for a digest-pinned request and passes it to distribution.UnmarshalManifest without verifying the body against the requested digest...

PT-2026-112726

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Client affected versions not specified Description An out-of-bounds read exists in the Remote Desktop Client, which allows an unauthorized attacker to disclose information over a network. An out-of-bounds read occurs whe...

PT-2026-111138

Name of the Vulnerable Software and Affected Versions sap-cloud-sdk versions prior to 0.45.2 Description The SAP Cloud SDK for Python contains a Server-Side Request Forgery SSRF issue affecting multi-tenant SAP Business Technology Platform BTP applications. An attacker who controls the tenant...

PT-2026-112227

Name of the Vulnerable Software and Affected Versions Windows Client for NFS affected versions not specified Description An integer overflow or wraparound occurs in the Windows Client for NFS, which allows an authorized attacker to elevate privileges locally and affect the system. An integer...

PT-2026-112195

Name of the Vulnerable Software and Affected Versions Windows Client-Side Caching CSC Service affected versions not specified Description A heap-based buffer overflow in the Windows Client-Side Caching CSC Service allows an unauthorized attacker to elevate privileges over a network. A heap-based...

PT-2026-111582

Name of the Vulnerable Software and Affected Versions Gotify server versions prior to 3.0.0 Description The password change endpoint 'POST /current/user/password' allows a user to change their password using only a valid client token. It does not require the current password or any additional...

CVE-2026-69949: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally...

CVE-2026-70006: Use After Free

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-85337: Windows Remote Desktop Client Information Disclosure Vulnerability

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-69955: Windows Client for NFS Information Disclosure Vulnerability

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network...