PT-2026-87693

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

PT-2026-87652

🚨 HIGH SEVERITY: CVE-2026-69681 CVSS 8.0 Heap buffer overflow in Virtual Hard Disk VHD Miniport Driver enables privilege escalation via network. Authorized attacker required. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/QbIbJXhzbo...

PT-2026-87677

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...

PT-2026-87229

Stack-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

PT-2026-87205

Out-of-bounds read in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

PT-2026-87332

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...

PT-2026-87335

Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally...

PT-2026-87204

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

PT-2026-87310

Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

PT-2026-87236

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

PT-2026-88284

Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...

PT-2026-88281

External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network...

PT-2026-88420

Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...

PT-2026-88153

A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php. Performing a manipulation of the argument Name results in improper authentication. It is possible to initiate the attack remotely. The exploit is now publi...

PT-2026-88180

A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function mysqli connect of the file config/database.php of the component Database Connection. This manipulation causes hard-coded credentials. The...

PT-2026-88212

In multiple functions in multiple locations, there is a possible background activity launch bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88126

🚨 CVE-2026-83978 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-88121

🚨 CVE-2026-83973 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-88135

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

PT-2026-88128

🚨 CVE-2026-83980 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...