CVE-2026-85811: Use After Free

Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-83499: Insufficient Granularity of Access Control

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-81969: Insufficient Granularity of Access Control

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69830: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-85806: Network Policy Server (NPS) Remote Code Execution Vulnerability

Integer underflow wrap or wraparound in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...

CVE-2026-103572: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Visual Studio Tools for Applications and SQL Server Management Studio allows an unauthorized attacker to execute code over a network...

CVE-2026-107615

An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init and ThemeLib load screenhooks32.dll / screenhooks64.dll with LoadLibrary using a bare fi...

python313-jupyter-server-2.20.0-1.3 on GA media (moderate)

python313-jupyter-server-2.20.0-1.3 on GA media Announcement ID: openSUSE-SU-2026:12012-1 Rating: moderate Cross-References: CVE-2020-26232 CVE-2023-39968 CVE-2023-40170 CVE-2023-49080 CVSS scores: CVE-2023-39968 SUSE : 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2023-40170 SUSE : 4.6...

PT-2026-113056

Name of the Vulnerable Software and Affected Versions Network Policy Server affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose sensitive information over a network, which can subsequently affect the system. Recommendations At the moment,...

PT-2026-112778

Name of the Vulnerable Software and Affected Versions Network Policy Server affected versions not specified Description A use after free issue exists in the Network Policy Server NPS, which allows an unauthorized attacker to execute arbitrary code over an adjacent network, potentially affecting t...

PT-2026-113391

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 20.0.0.12 through 26.0.0.10 Description An unauthenticated remote attacker can bypass access controls configured on gRPC service methods. gRPC is a high-performance remote procedure call...

PT-2026-112767

Name of the Vulnerable Software and Affected Versions Network Policy Server affected versions not specified Description A use after free issue exists in the Network Policy Server NPS, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Use...

PT-2026-112777

Name of the Vulnerable Software and Affected Versions Windows Telephony Server affected versions not specified Description A use-after-free condition exists in the Windows Telephony Server. This allows an authorized attacker to elevate privileges locally on the system. Use-after-free is a memory...

PT-2026-112773

Name of the Vulnerable Software and Affected Versions Network Policy Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Network Policy Server NPS, which allows an unauthorized attacker to execute arbitrary code over a network and affect the...

PT-2026-112928

Name of the Vulnerable Software and Affected Versions Windows Server affected versions not specified Description An out-of-bounds read in the Network File System NFS allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Recommendations At the momen...

PT-2026-112940

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A use-after-free condition in the Windows SMB Server allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...

PT-2026-111896

Name of the Vulnerable Software and Affected Versions Network Policy Server affected versions not specified Description A heap-based buffer overflow occurs in the Network Policy Server NPS, which allows an unauthorized attacker to execute arbitrary code over a network and affect the system. A...

PT-2026-112339

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Server-side request forgery SSRF allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where a server is tricked into making requests to an...

PT-2026-111805

Name of the Vulnerable Software and Affected Versions Visual Studio Tools for Applications affected versions not specified SQL Server Management Studio affected versions not specified Visual Studio Copilot extension affected versions not specified Description Improper control of code generation...

PT-2026-112913

Name of the Vulnerable Software and Affected Versions Windows DCOM Server affected versions not specified Description A race condition occurs in the Windows DCOM Server due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally. ...