PT-2026-113475

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description The use of an uninitialized variable in the ThirdParty lmza sdk allows a remote attacker to potentially read memory inside the sandbox by using a crafted file. Recommendations Update...

CVE-2026-85354: Use After Free

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-111675

A vulnerability was detected in SourceCodester Art Gallery Management System 1.0. This impacts the function Action::save user of the file admin/admin class.php of the component Account Creation. The manipulation of the argument Name results in sql injection. The attack may be performed from remot...

CVE-2026-83864: Authentication Bypass by Spoofing

Improper access control in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-85821: Out-of-bounds Read

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

CVE-2026-102191: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-88126: Untrusted Pointer Dereference

Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally...

PT-2026-112947

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally...

CVE-2026-97798: Improper Neutralization of Argument Delimiters in a Command

Improper neutralization of argument delimiters in a command 'argument injection' in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-111898

Name of the Vulnerable Software and Affected Versions Windows Network File System affected versions not specified Description An untrusted pointer dereference in the Windows Network File System allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment,...

PT-2026-112670

Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description An issue in the Windows Win32 Kernel Subsystem allows an authorized attacker to locally disclose sensitive system information to an unauthorized control sphere...

PT-2026-112286

Name of the Vulnerable Software and Affected Versions Windows PowerShell affected versions not specified Description A protection mechanism failure allows an authorized attacker to locally bypass a security feature, which can lead to an impact on the system. Recommendations At the moment, there i...

PT-2026-112688

Name of the Vulnerable Software and Affected Versions Windows Registry affected versions not specified Description An authorized attacker can elevate privileges locally due to improper link resolution before file access, a condition known as link following, within the Windows Registry...

PT-2026-112264

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description An issue exists where resources are allocated without limits or throttling, which allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the...

PT-2026-112088

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A use-after-free condition in Windows Storage allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...

Ubuntu 26.04 LTS : sudo-rs vulnerability (USN-8708-1)

The remote Ubuntu 26.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8708-1 advisory. It was discovered that sudo-rs incorrectly handled time-of-check vs time- of-use conditions in sudoedit. A local attacker with permission to edit specific files...

PT-2026-112574

Name of the Vulnerable Software and Affected Versions Windows CCFFilter Driver affected versions not specified Description A use after free issue in the Windows CCFFilter Driver allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Use after free i...

Microsoft Windows: CVE-2026-70201: Windows DHCP Server Denial of Service Vulnerability

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally...

Microsoft Windows: CVE-2026-100225: Windows Storage Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

PT-2026-112405

Name of the Vulnerable Software and Affected Versions Windows BitLocker affected versions not specified Description An open redirect issue exists where the system can be directed to an untrusted site. This allows an unauthorized attacker to bypass a security feature through a physical attack...