EUVD-2026-43542

Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lorex 2K Indoor Wi-Fi Security Cameras. User interaction is not required to...

PT-2026-58459

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A buffer over-read in Windows Hyper-V allows an authorized attacker to cause a denial of service over an adjacent network, potentially leading to a system crash. Recommendations At th...

PT-2026-58377

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows Server 2025 affected versions not specified Description A race condition exists in Windows Media, where concurrent execution using a shared resource with improper synchronization allows an...

PT-2026-58362

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description A heap-based buffer overflow occurs in Windows GDI+, which is a graphics API used for rendering images and shapes. This flaw allows an unauthorized remote attacker to execute arbitrary...

PT-2026-58449

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

PT-2026-58611

Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network...

PT-2026-58422

Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description A missing authentication check for a critical function in the Windows Server Update Service allows an authorized attacker to elevate privileges over a network...

PT-2026-58424

Name of the Vulnerable Software and Affected Versions Windows 10 Windows 11 Windows Server versions 2012 through 2025 Description A heap-based buffer overflow exists in Windows Message Queuing MSMQ, a service used for asynchronous communication between applications. This flaw allows an unauthoriz...

VulnCheck KEV: CVE-2026-56164

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network...

PT-2026-58628

Name of the Vulnerable Software and Affected Versions Windows VMSwitch affected versions not specified Description A use-after-free condition in Windows VMSwitch allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory corruption issue that occurs when an...

PT-2026-58639

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper authorization allows an authorized attacker to elevate privileges over a network, enabling them to affect the system. Recommendations At the moment, there is no...

PT-2026-58505

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description A double free issue exists in the Windows DHCP Server, which could allow an authorized attacker to execute arbitrary code over a network. A double free occurs when the program...

PT-2026-58197

Name of the Vulnerable Software and Affected Versions Azure Spring Apps affected versions not specified Description Improper authentication allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that contain...

PT-2026-58609

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow in the Windows Network File System NFS allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow occurs when a...

PT-2026-58461

Name of the Vulnerable Software and Affected Versions Microsoft Windows DNS affected versions not specified Description A use after free flaw in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network. Use after free is a memory corruption issue that occurs when...

PT-2026-58695

Name of the Vulnerable Software and Affected Versions Microsoft Configuration Manager version 2509 Description Improper access control allows an authorized attacker to elevate privileges over a network. Recommendations Update Microsoft Configuration Manager version 2509 to the latest patched...

PT-2026-58525

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network...

PT-2026-58329

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description A use-after-free flaw in the Windows Runtime allows an authorized network user to elevate their privileges to administrator level. Use-after-free is a memory corruption issue that occurs...

Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability

Microsoft SharePoint contains a missing authentication for critical function vulnerability that allows an unauthorized attacker to elevate privileges over a network...

PT-2026-58269

Name of the Vulnerable Software and Affected Versions Windows RDP affected versions not specified Description An out-of-bounds read in Windows Remote Desktop Protocol RDP allows an unauthorized attacker to disclose information over a network. An out-of-bounds read occurs when a program reads data...