PT-2026-112711

Name of the Vulnerable Software and Affected Versions Servicing Stack Updates affected versions not specified Description A heap-based buffer overflow exists in Servicing Stack Updates. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs whe...

PT-2026-111916

Name of the Vulnerable Software and Affected Versions Windows Portable Device MTP Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Portable Device MTP Driver. This issue allows an unauthorized attacker to elevate privileges on the system throug...

CVE-2026-83773: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...

CVE-2026-70186

Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-70196: Inefficient Algorithmic Complexity

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-88210: Reliance on Untrusted Inputs in a Security Decision

Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-108972: Improper Authentication

A vulnerability was found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function sessionstart of the file controller/employee.php of the component Employee Endpoint. The manipulation of the argument role/pfimg/EmpId results in improper authenticatio...

Microsoft Windows: CVE-2026-70280: Windows Hello Security Feature Bypass Vulnerability

Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally...

CVE-2026-83931: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...

CVE-2026-83866: Use After Free

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-83875: Out-of-bounds Read

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83655: Network Policy Server (NPS) Denial of Service Vulnerability

Out-of-bounds read in Network Policy Server NPS allows an unauthorized attacker to deny service over a network...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : systemd vulnerabilities (USN-8626-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8626-1 advisory. It was discovered that systemd-homed did not properly verify the signature of home records. A local attacker could possibly use...

CentOS Linux 8.4 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (CENTOS8.4:CLSA-2026:1791918528)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791918528 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by...

CVE-2026-85945: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-69721: Out-of-bounds Read

Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally...

CVE-2026-97014: Out-of-bounds Read

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-108956: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in code-projects Online Reviewer System 1.0. The affected element is an unknown function of the file /reviewer/system/system/admins/manage/users/btnfunctions.php of the component User Update Handler. Such manipulation leads to sql injection. The attack may be launch...

CVE-2026-87699: Heap-based Buffer Overflow

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally...

CVE-2026-109157: Stack-based Buffer Overflow

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The...