PT-2026-92312

Name of the Vulnerable Software and Affected Versions VPU affected versions not specified Description Improper input validation in VPU allows for a shared memory overwrite. This issue can lead to local escalation of privilege, granting the attacker System execution privileges without requiring us...

PT-2026-92186

Name of the Vulnerable Software and Affected Versions Falcon sensor for Windows versions prior to 8.10.21408 Falcon sensor for Windows versions prior to 7.40.21309 Falcon sensor for Windows versions prior to 7.39.21113 Falcon sensor for Windows versions prior to 7.38.21007 LTS Falcon sensor for...

PT-2026-92298

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A heap buffer overflow in the gf base update finger base function within gf base.c allows for an out-of-bounds write. This issue can be exploited to achieve loca...

PT-2026-92302

Name of the Vulnerable Software and Affected Versions VPU affected versions not specified Description An integer overflow in VPU can lead to an out-of-bounds write, which is a condition where data is written outside the intended memory boundary. This issue allows for local escalation of privilege...

CVE-2026-92180: Uncontrolled Search Path Element

pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of pdfforge PDF Architect. An attacker must first obtain the ability to...

CVE-2026-56986: Unintended Proxy or Intermediary

In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56970: Protection Mechanism Failure

In multiple locations, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55332: Improper Input Validation

In multiple locations, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55302: Protection Mechanism Failure

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0179: Improper Privilege Management

In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-40058: Time-of-check Time-of-use (TOCTOU) Race Condition

CrowdStrike released a security update to address a vulnerability in the Falcon sensor for Windows. The vulnerability only exists when the Microsoft Office File Malicious Macro Removal Windows policy setting is enabled and customers remain protected through the Cloud Anti-malware for Microsoft...

CVE-2026-68533: Missing Authorization

Concrete CMS below 9.5.3 conversation attachment uploaded endpoint imported files into the file manager before evaluating the "Add Message Attachments" permission, which was only checked after the file had been stored. A user denied that permission, or an unauthenticated visitor on a guest-postin...

CVE-2026-58751: Use After Free

In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58734: Concurrent Execution using Shared Resource with Improper Synchronization

In googlembarecvmsg of googlembapoll.c, there is a possible out-of-bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92328

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An incorrect bounds check in multiple locations allows for a possible out-of-bounds write, which is a condition where data is written outside the intended memory...

PT-2026-92344

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the phNxpNciHal ext process nfc init rsp function within phNxpNciHal ext.cc allows for a possible out-of-bounds write. This condition c...

PT-2026-92300

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description Improper input validation in multiple locations allows for an out-of-bounds write, which is a condition where data is written outside the boundaries of a...

PT-2026-92290

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An out-of-bounds write exists in the gf ta test set config function within the gf ta test.c file due to improper input validation. This flaw allows for local...

PT-2026-92309

In multiple locations, there is a possible permission bypass due to side channel information disclosure. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-92316

Name of the Vulnerable Software and Affected Versions CPM affected versions not specified Description A permission bypass exists due to a confused deputy, which is a security issue where a privileged entity is tricked by a less privileged entity into performing an action it is not authorized to d...