PT-2026-113155

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A null pointer dereference in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute arbitrary code...

PT-2026-113149

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A use-after-free condition in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges...

PT-2026-113136

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description An out-of-bounds read in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose sensitive informatio...

PT-2026-113139

Name of the Vulnerable Software and Affected Versions Windows COM+ Event System Service affected versions not specified Description An untrusted pointer dereference in the Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

PT-2026-113152

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A use-after-free condition in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges...

PT-2026-111293

Name of the Vulnerable Software and Affected Versions SourceCodester E-Learning System version 1.0 Description An unrestricted file upload issue exists in the save users function within the /classes/Users.php?f=save endpoint. A remote attacker can exploit this by manipulating the img argument to...

CVE-2026-96947: Use After Free

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-85355: Inclusion of Functionality from Untrusted Control Sphere

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70048: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-8636-1)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8636-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-8631-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8631-1 advisory. Siebe Devroe, Hlose Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated...

CVE-2026-109114: Improper Authentication

A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This vulnerability affects unknown code of the file User/login.php of the component Login Form. Such manipulation of the argument email/passwd leads to improper...

CVE-2026-109606: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::saveuser of the file admin/adminclass.php of the component Account Creation. The manipulation of the argument Name results in sql injection. The attack may be performed from remote...

CVE-2026-109521: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be...

Microsoft Windows: CVE-2026-85909: Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83683: Windows Encrypting File System (EFS) Information Disclosure Vulnerability

Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-83565: Windows Encrypting File System (EFS) Information Disclosure Vulnerability

Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83513: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70157: Windows System Information Console Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows System Information Console allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70116: Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability

Stack-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to bypass a security feature with a physical attack...