Microsoft Windows: CVE-2026-85810: Windows Telephony Server Elevation of Privilege Vulnerability

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...

PT-2026-111549

Name of the Vulnerable Software and Affected Versions Parse Server versions 5.4.0 through 8.6.95 Parse Server versions 9.0.0 through 9.10.2-alpha.4 Description Transactional batch state is shared across concurrent requests, allowing a transactional batch request from one client to interfere with...

PT-2026-111668

🚨 CVE-2026-96297 Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released. When an internal aggregation stage is combined with a batch size of 0, the server may read from memory that is no longer in use. Becau...

CVE-2026-97843: Out-of-bounds Read

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

Microsoft Exchange: CVE-2026-87695: Microsoft Exchange Server Elevation of Privilege Vulnerability

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

CVE-2026-88112: Untrusted Pointer Dereference

Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network...

PT-2026-112842

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An untrusted pointer dereference allows an unauthorized remote attacker to execute arbitrary code over a network, potentially compromising the system. Recommendations At the moment, there ...

CVE-2026-70189: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

PT-2026-113252

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

PT-2026-113451

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network...

PT-2026-112652

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An authorized attacker can execute arbitrary code over a network due to the release of an invalid pointer or reference. This issue allows remote attackers to affect the system...

PT-2026-112942

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An out-of-bounds read occurs in the DNS Server, which allows an authorized attacker to cause a denial-of-service condition over a network. This issue enables attackers to negatively affect...

PT-2026-112927

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An untrusted pointer dereference allows an unauthorized remote attacker to execute arbitrary code over a network, which can affect the system. Recommendations At the moment, there is no...

PT-2026-112929

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An untrusted pointer dereference allows an unauthorized remote attacker to execute arbitrary code over a network, which can affect the system. Recommendations At the moment, there is no...

PT-2026-112936

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An out-of-bounds read occurs in the DNS Server, which allows an authorized attacker to cause a denial of service over a network. This issue enables attackers to negatively affect the...

PT-2026-112938

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An out-of-bounds read occurs in the DNS Server, which allows an authorized attacker to cause a denial-of-service condition over a network. This issue enables attackers to negatively affect...

PT-2026-113443

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when a program writes...

PT-2026-111557

Name of the Vulnerable Software and Affected Versions Froxlor versions 0.10.0 through 2.3.13 Description Missing authorization allows reseller accounts to access MySQL server and cronjob configurations intended only for full administrators. This is achieved by using API read commands through the...

PT-2026-113260

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

PT-2026-113447

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than i...