PT-2026-70723

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70719

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70531

Name of the Vulnerable Software and Affected Versions Windows Schannel affected versions not specified Description A use-after-free condition in Windows Schannel allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an applicatio...

PT-2026-70525

Name of the Vulnerable Software and Affected Versions Windows Kerberos affected versions not specified Description A use-after-free condition in Windows Kerberos allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an applicatio...

PT-2026-70721

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an unauthorized attacker to execute arbitrary code locally or remotely,...

PT-2026-70354

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by...

PT-2026-70549

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A heap-based buffer overflow occurs in the Windows SMB Server, which allows an authorized attacker to execute arbitrary code over a network and affect the system. A heap-based buff...

PT-2026-70464

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A heap-based buffer overflow exists in the Windows Universal Disk Format File System Driver UDFS. This issue allows an unauthorized attacker to...

PT-2026-70440

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A race condition occurs in Windows DNS due to improper synchronization when using a shared resource. This allows an authorized attacker to execute arbitrary code over a network, potential...

MiracleLinux 9 : nginx:1.24 (AXSA:2026-1509:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1509:01 advisory. nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-42055 Tenable has extracted t...

PT-2026-70702

Name of the Vulnerable Software and Affected Versions Microsoft Azure Attestation service affected versions not specified Device Health Attestation Service affected versions not specified Description A race condition exists in the Microsoft Azure Attestation service and Device Health Attestation...

PT-2026-70562

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description A heap-based buffer overflow occurs in the Windows DHCP Server, which allows an unauthorized attacker located on an adjacent network to execute arbitrary code and affect the syste...

PT-2026-70624

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized attacker...

PT-2026-70184

Name of the Vulnerable Software and Affected Versions Solid Edge SE2025 versions prior to V225.0 Update 15 Solid Edge SE2026 versions prior to V226.0 Update 7 Description An out of bounds read occurs when the application parses specially crafted PAR files. This flaw could allow an attacker to...

PT-2026-70992

Name of the Vulnerable Software and Affected Versions Wazuh Manager affected versions not specified Description A deserialization of untrusted data issue exists in the Cluster DAPI Protocol, which allows a remote attacker to execute arbitrary code and perform arbitrary file read and write...

PT-2026-70678

Name of the Vulnerable Software and Affected Versions Windows Autopilot affected versions not specified Description A use-after-free condition in Windows Autopilot enables an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...

PT-2026-70876

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to execute arbitrary commands when a user downloads a crafted folder and invokes Properties and Calculate Size because calcLocal in...

PT-2026-70805

Name of the Vulnerable Software and Affected Versions Lightroom Classic affected versions not specified Description Deserialization of untrusted data allows for arbitrary code execution within the context of the current user. This occurs when a victim opens a malicious file, requiring user...

PT-2026-70807

Name of the Vulnerable Software and Affected Versions Lightroom Classic affected versions not specified Description An out-of-bounds write issue exists that could allow arbitrary code execution within the context of the current user. This occurs when a user opens a specially crafted malicious fil...

PT-2026-70355

Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk path for a Code step from the step's name and passes that path to a shell-invoked build command. A step name containing shell metacharacters can break out of...