PT-2026-70764

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information about a newer...

PT-2026-70700

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...

PT-2026-70753

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description Improper input validation allows an unauthorized attacker to disclose information locally. Recommendations At the moment, there is no information about a newer version tha...

PT-2026-70554

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows DHCP Server, which could allow an unauthorized attacker to disclose sensitive information over an adjacent network an...

PT-2026-70679

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An out-of-bounds read in Windows NTFS allows an authorized attacker to disclose sensitive information locally, which can affect the system. Recommendations At the moment, there is no...

PT-2026-70727

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description Incomplete cleanup in the software allows an unauthorized attacker to disclose sensitive information locally, which can affect the system. Recommendations At the moment,...

PT-2026-70389

Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...

PT-2026-70869

Name of the Vulnerable Software and Affected Versions insights-client affected versions not specified Description A flaw exists where the application logs request headers upon receiving a non-200 response. This process may expose the cloud.openshift.com pull-secret token. A local user with access...

PT-2026-70870

Name of the Vulnerable Software and Affected Versions insights-client affected versions not specified Description A flaw exists where a compromised managed cluster, known as a spoke, can inject unencoded data into the Insights API URL path. This happens because the ClusterID variable, which is...

PT-2026-70867

Name of the Vulnerable Software and Affected Versions search-v2-api affected versions not specified Description An authentication bypass exists in the authentication middleware of the affected component. The system unconditionally skips authentication checks when a request contains an Upgrade:...

PT-2026-70505

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows DHCP Server, which allows an unauthorized attacker to disclose sensitive information over an adjacent network...

PT-2026-70117

A missing authorization vulnerability in Windmill Labs Windmill through 1.783.0 allows authenticated operators to write job progress and read job metrics for any job in the workspace regardless of ownership. The job metrics handlers accept no authorization extractor, bypassing workspace-level...

PT-2026-70045

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description A malicious or compromised OData service could disclose sensitive authentication information and inject untrusted data into the application. This issue involves...

PT-2026-70534

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description An out-of-bounds read in the Windows SMB Client allows an unauthorized attacker to disclose sensitive information over a network, which can subsequently affect the system. An...

PT-2026-70479

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows DHCP Server, which allows an unauthorized attacker to disclose sensitive information over an adjacent network...

PT-2026-70760

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally...

PT-2026-70451

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description An out-of-bounds read in the Windows DWM Core Library allows an authorized attacker to disclose sensitive information locally, which may affect the system. Recommendations At...

PT-2026-70477

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows DHCP Server, which allows an unauthorized attacker to disclose sensitive information over an adjacent network...

PT-2026-70841

OpenIM Server v3.8.3 contains a missing authorization vulnerability that allows any authenticated user to access admin-only management API endpoints by submitting POST requests with a regular user bearer token to /user/get users, /user/get all users uid, and /group/get groups. Attackers can explo...

PT-2026-70667

Name of the Vulnerable Software and Affected Versions Microsoft Teams Mobile affected versions not specified Description An issue in Microsoft Teams Mobile allows an unauthorized actor to disclose sensitive information over a network. Recommendations At the moment, there is no information about a...