PT-2026-70631

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An integer overflow or wraparound occurs in Microsoft Office, which could allow an unauthorized attacker to execute arbitrary code locally or remotely, potentially affecting the enti...

PT-2026-70743

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs in Microsoft Office, which could allow an unauthorized attacker to execute code locally. A heap-based buffer overflow is a memory corruption issue...

CVE-2026-68810: Untrusted Pointer Dereference

Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2026-70618

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an unauthorized...

CVE-2026-20737: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable...

CVE-2026-64912: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally...

PT-2026-70706

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A stack-based buffer overflow occurs in Microsoft Office, which could allow an unauthorized attacker to execute arbitrary code on the local system. A stack-based buffer overflow is a...

CVE-2026-20789: Improper Access Control

Improper access control for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable local code execution. This result may...

PT-2026-70656

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs in Microsoft Office, which could allow an unauthorized attacker to execute code locally. A heap-based buffer overflow is a memory corruption issue...

PT-2026-70649

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized attacker to execute code locally. Recommendations At the moment, the...

PT-2026-70585

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description A heap-based buffer overflow occurs in Windows GDI+, which is a graphics API used for rendering images and shapes. This issue allows an authorized attacker to execute code locally or a...

PT-2026-70287

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description Exposure of sensitive information within Ring 2: Device Drivers may allow an escalation of privilege. An unprivileged software adversary with an...

CVE-2026-9169

CVE-2026-9169 describes a DLL search order hijacking issue in LUCID Vision Labs Arena SDK 1.0.80.49 on Windows. An attacker with local access can place a malicious DLL in a user-controlled directory that appears in the PATH the SDK traverses to resolve a dependency, resulting in arbitrary code ex...

SUSE CVE-2026-51401

An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vmsfixfilename function within file vim/src/osvms.c...

Linux Distros Unpatched Vulnerability : CVE-2026-51400

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vmsfixfilename function within file vim/src/osvms.c...

Linux Distros Unpatched Vulnerability : CVE-2026-51401

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Vim Project v9.2.0389 and earlier allows a local attacker to execute arbitrary code via the vmsfixfilename function within file vim/src/osvms.c...

SUSE CVE-2026-18739

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...

CVE-2026-18755

A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local attacker with write access to an unsafe search directory to execute arbitrary code. By placing a crafted dynamic-link library DLL file into the application search path prior to the legitimate library, the malicious code is...

CVE-2026-18739

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...

AZL-94508 CVE-2026-18739 affecting package popt 1.19-1

A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application or through deep alias nesting, can lead to corruption of internal program data. This corruption could potentially enable a local attacke...