213269 matches found
PT-2026-87221
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
PT-2026-87223
Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...
PT-2026-87704
šØ HIGH SEVERITY: CVE-2026-69767 CVSS 8.8 Use-after-free in MS Office PowerPoint enables remote code execution. Network-based attack, no privileges required. Patch immediately. CVE Vulnerability PatchNow https://t.co/Z8mtFG8Rrb...
PT-2026-87490
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
PT-2026-87720
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-87808
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-87797
Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
PT-2026-87267
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
PT-2026-87266
Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...
PT-2026-87192
InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...
Microsoft Windows MIDI Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows MIDI...
PT-2026-87916
šØ CVE-2026-73007 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. š@cveNotify...
PT-2026-87911
šØ CVE-2026-73002 Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. š@cveNotify...
PT-2026-87930
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-87898
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-87977
Null pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
PT-2026-88018
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
PT-2026-87951
Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally...
PT-2026-88011
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
PT-2026-88225
In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...