CVE-2026-102209: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2026-85881: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges over a network...

CVE-2026-70156: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-88160: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-70136: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-96324: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-83570: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-83850: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-83725: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network...

Fabric OS AAA Privilege Bypass

The vulnerability of the Fabric OS AAA component of the Brocade Fabric OS operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Google Chrome Downloads Component Clickjacking

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack using a specially created HTML page...

Google Chrome Downloads Component Data Compromise

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge relates to incomplete cleaning of temporary or auxiliary resources. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...

Google Chrome Downloads Unauthorized Access

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

PT-2026-111919

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A heap-based buffer overflow in the Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a...

PT-2026-111465

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description An issue exists within the DOM File component. Recommendations Update Firefox to version 158...

KB5126868: Windows 10 Version 1607 / Windows Server 2016 Security Update (October 2026)

The remote Windows host is missing security update 5126868. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

PT-2026-113118

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendation...

CVE-2026-92876

IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...

CVE-2026-92876

The IBM Maximo Application Suite - IoT Component versions 9.2.0 , 9.1.0 , and 9.0.0 are vulnerable to a Denial of Service (DoS) attack. The root cause is identified as uncontrolled recursion (CWE-674), which can be triggered by a remote attacker over the network. The vulnerability results in a hi...

CVE-2026-92876 IBM Maximo Application Suite - IoT Component Denial of Service

IBM Maximo Application Suite - IoT Component 9.2.0, 9.1.0, and 9.0.0 could allow a remote attacker to cause a denial of service due to uncontrolled recursion...