CVE-2026-96934: Use After Free

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

PT-2026-112777

Name of the Vulnerable Software and Affected Versions Windows Telephony Server affected versions not specified Description A use-after-free condition exists in the Windows Telephony Server. This allows an authorized attacker to elevate privileges locally on the system. Use-after-free is a memory...

Microsoft SQL Server: CVE-2026-85886: Microsoft SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-87695: Inclusion of Functionality from Untrusted Control Sphere

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

CVE-2026-96926: Missing Authorization

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

CVE-2026-97826: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-84013: Use After Free

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...

CVE-2026-96320: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

CVE-2026-81969: Insufficient Granularity of Access Control

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

Nginx UI Code Execution

The vulnerability of the Nginx UI server’s user interface is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Windows: CVE-2026-88129: Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network...

CVE-2026-87692: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

CVE-2026-101294: Missing Cryptographic Step

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass cryptographic signature verification due to improper verification of cryptographic signature...

CVE-2026-103499: Uncontrolled Resource Consumption

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption...

PT-2026-111575

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.5 and 9.0 Description A flaw in the CSIv2 inbound propagation handler allows a remote attacker to bypass authentication. Recommendations At the moment, there is no information about a newer version...

PT-2026-111576

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.5 and 9.0 Description An authenticated attacker can bypass authorization, which may lead to administrative impersonation across the cell. Recommendations At the moment, there is no information about ...

CVE-2026-97844: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

UBUNTU-CVE-2026-107615

An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init and ThemeLib load screenhooks32.dll / screenhooks64.dll with LoadLibrary using a bare fi...

PT-2026-111136

Name of the Vulnerable Software and Affected Versions SAP Manufacturing Integration and Intelligence versions 15.4 through 15.5 Description SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within the Configuration Service. An attacker with MII...

PT-2026-111865

A malicious, compromised, or MITM-controlled Exchange server can return a single well-formed SOAP response containing an element with enough attributes to keep Thunderbird's main thread CPU-bound for seconds to hours. This vulnerability was fixed in Thunderbird 158 and Thunderbird 153.5...