CVE-2026-83499: Insufficient Granularity of Access Control

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83665: NULL Pointer Dereference

Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

CVE-2026-79715: Improper Limitation of a Pathname to a Restricted Directory

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use a specially crafted application archive to write files outside the intended directory...

CVE-2026-88088: Integer Overflow or Wraparound

Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-70069: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network...

CVE-2026-97835: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-70083: Incorrect Authorization

Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally...

CVE-2026-69795: NULL Pointer Dereference

Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally...

CVE-2026-68883: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-97821: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-67626: Uncontrolled Resource Consumption

Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-14532: Integer Overflow or Wraparound

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain version information that causes an uncaught exception...

CVE-2026-83771: Use After Free

Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network...

CVE-2026-70279: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-97832: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

PT-2026-113263

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

CVE-2026-88127: Use After Free

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85803: Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability

Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...

CVE-2026-70071: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-96325: Windows SMB Server Denial of Service Vulnerability

Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network...