PT-2026-87341

Name of the Vulnerable Software and Affected Versions Microsoft COM for Windows affected versions not specified Description An issue in Microsoft COM for Windows allows an authorized attacker to locally disclose sensitive information through the generation of error messages. Recommendations At th...

PT-2026-88224

Name of the Vulnerable Software and Affected Versions Android OS affected versions not specified Description A logic error in multiple functions of RemoteViews.java allows a bypass of background activity launch restrictions. This flaw enables local escalation of privilege without requiring...

CVE-2026-75156: Origin Validation Error

Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD idtokens during OAuth login. Deployments are affected only when the FAB auth manager is configured with Azure AD as an OAuth provider. Because the signing keys are fetched from Microsoft's...

CVE-2026-69684: Generation of Error Message Containing Sensitive Information

Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...

CVE-2026-28602: Improper Access Control

In setClipboardAccessNotificationsEnabledForUser of ClipboardService.java, there is a possible mult-iuser isolation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88231

In WriteImageToDisk of runtime image.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-87651

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description An origin validation error allows an unauthorized attacker to perform spoofing over a network, which can be used to affect the system. Recommendations At the moment, there is no informati...

PT-2026-88239

In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-69362: Use After Free

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69612: Absolute Path Traversal

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-87507

Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...

CVE-2026-68894: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...

CVE-2026-78512: Numeric Truncation Error

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

ROS-20260908-73-0046

The vulnerability in xorg-x11-drv-nvidia is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-87402

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-88141

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69535: Numeric Truncation Error

Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-58649: Origin Validation Error

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-58649: Origin Validation Error

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

PT-2026-87488

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A heap-based buffer overflow occurs in Windows Error Reporting, which allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow is a...