PT-2026-113041

Name of the Vulnerable Software and Affected Versions Microsoft.WindowsDesktop.App.Runtime.win-arm64 versions 10.0.0 through 10.0.12 Microsoft.WindowsDesktop.App.Runtime.win-x64 versions 10.0.0 through 10.0.12 Microsoft.WindowsDesktop.App.Runtime.win-x86 versions 10.0.0 through 10.0.12...

PT-2026-112017

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 3.5 through 4.8.1 Description An untrusted search path issue exists that allows an authenticated local attacker to bypass Windows Defender Application Control WDAC restrictions. The attack involves using a...

PT-2026-111953

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Visual Studio affected versions not specified Description An issue involving type confusion, which occurs when a program uses a resource with a type that is incompatible with the expected type, allows an...

Microsoft .NET Framework: CVE-2026-102869: .NET and Visual Studio Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...

October 13, 2026-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB5128926)

October 13, 2026-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB5128926 Applies To .NET Note Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microsoft...

October 13, 2026-KB5128928 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows Server 2022

October 13, 2026-KB5128928 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows Server 2022 Applies To .NET Note Release Date: October 13, 2026 Version: .NET Framework 3.5, 4.8 and 4.8.1 Summary This article describes the security and cumulative update for 3.5, 4.8 and 4.8.1 for...

October 13, 2026-KB5128924 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2

October 13, 2026-KB5128924 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 21H2 Applies To .NET Note Release Date: October 13, 2026 Version: .NET Framework 3.5, 4.8 and 4.8.1 Summary This article describes the security and cumulative update for 3.5, 4.8 and 4.8.1 fo...

October 13, 2026-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 (KB5128927)

October 13, 2026-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 R2 KB5128927 Applies To .NET Note Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microsof...

CVE-2026-70161

Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-96234

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-96231

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-70197

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-70190

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-96229

Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network...

CVE-2026-96225

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-87697

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network...

Microsoft .NET: CVE-2026-96229: .NET Information Disclosure Vulnerability

Permissive list of allowed inputs in .NET allows an unauthorized attacker to disclose information over a network...

Apache NuttX RTOS 13.1.0 6LoWPAN HC06 Decompressor Out-of-Bounds Write

Apache NuttX RTOS version 13.1.0 contains an out-of-bounds write in the 6LoWPAN HC06 header decompressor when UDP and TCP support are disabled. !/usr/bin/env python Apache NuttX RTOS 13.1.0 6LoWPAN HC06 Decompressor Kernel Out-of-Bounds Write Vendor: The Apache Software Foundation Product web pag...

PT-2026-111391

Name of the Vulnerable Software and Affected Versions .NET Client Library for SIMATIC S7 Webserver API versions prior to 3.3.61 Description Applications using the library do not properly validate filenames received from remote servers during ticket downloads. An attacker capable of manipulating t...

PT-2026-111392

Name of the Vulnerable Software and Affected Versions .NET Client Library for SIMATIC S7 Webserver API versions prior to V3.3.62 Description Applications using the library do not properly redact PLC restore passwords from HTTP error exception messages. An attacker with access to logs or diagnosti...