PT-2026-111892

Name of the Vulnerable Software and Affected Versions Windows Group Policy affected versions not specified Description Improper privilege management allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is no...

PT-2026-112880

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

CVE-2026-70175: Weak Password Recovery Mechanism for Forgotten Password

Improper authentication in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : p11-kit vulnerabilities (USN-8687-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8687-1 advisory. It was discovered that p11-kit incorrectly handled certain RPC messages. A local attacker could use this issue to cau...

PT-2026-111372

A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate Path Builder. Such manipulation leads to resource consumption. The attack can be launched remotely. The vendor was contacted early about this disclosure but...

PT-2026-112868

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description Improper access control in the Windows Broadcast DVR User Service allows an authorized attacker to disclose sensitive information locally, which can affect the...

PT-2026-111369

Name of the Vulnerable Software and Affected Versions APOGEE MBC PPC BACnet affected versions not specified APOGEE MBC PPC P2 Ethernet affected versions not specified APOGEE MEC PPC BACnet affected versions not specified APOGEE MEC PPC P2 Ethernet affected versions not specified APOGEE PXC Compac...

PT-2026-112630

Name of the Vulnerable Software and Affected Versions Windows Internet wininet.dll affected versions not specified Description A relative path traversal issue exists in the Windows Internet component wininet.dll. This flaw allows an authorized attacker to perform local tampering. Recommendations ...

PT-2026-118151

Уязвимость веб-платформы для совместной работы и управления документами Microsoft SharePoint Server Subscription Edition связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, проводить спуфинг-атаки...

Microsoft Windows: CVE-2026-96915: Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83907: Windows Hello Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally...

PT-2026-112165

Access of resource using incompatible type 'type confusion' in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally...

CVE-2026-69883: Use After Free

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network...

PT-2026-112526

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description The use of an uninitialized resource in the Windows Event Logging Service allows an authorized attacker to disclose sensitive information locally and affect the system...

CVE-2026-96220: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Windows Assigned Access allows an authorized attacker to elevate privileges locally...

CVE-2026-70071: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally...

Microsoft SharePoint: CVE-2026-70267: Microsoft Office SharePoint Remote Code Execution Vulnerability

Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-96231: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-87715: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85836: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...