CVE-2026-88081: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-85811: Network Policy Server (NPS) Remote Code Execution Vulnerability

Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-85811: Use After Free

Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over an adjacent network...

PT-2026-112880

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

PT-2026-113453

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

PT-2026-113452

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An integer overflow or wraparound occurs, allowing an authorized attacker to elevate privileges locally and affect the system. An integer overflow is a condition where an arithmetic...

PT-2026-113451

Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network...

PT-2026-113450

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than i...

PT-2026-113249

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-70071: Role: DNS Server Tampering Vulnerability

Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally...

UBUNTU-CVE-2026-107614

An integer underflow in WinCursorShapeUtils::trimTransparent in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a width or height of zero to be processed on the DXGI...

CVE-2026-93895: Improper Access Control

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods...

Microsoft Windows: CVE-2026-83635: Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network...

CVE-2026-83753: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83771: Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability

Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network...

PT-2026-111549

Name of the Vulnerable Software and Affected Versions Parse Server versions 5.4.0 through 8.6.95 Parse Server versions 9.0.0 through 9.10.2-alpha.4 Description Transactional batch state is shared across concurrent requests, allowing a transactional batch request from one client to interfere with...

PT-2026-111653

🚨 CVE-2026-103965 An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not...

PT-2026-111575

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.5 and 9.0 Description A flaw in the CSIv2 inbound propagation handler allows a remote attacker to bypass authentication. Recommendations At the moment, there is no information about a newer version...

PT-2026-111380

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC Drive Controller CPU 1504D TF affected versions not specified Description Devices do not properly restrict executable content within imported trace files. An attacker could social engineer an authorized user with the "Read...

PT-2026-111523

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0 Liberty could allow a remote unauthenticated attacker to cause a denial of service due to uncontrolled resource consumption...