CVE-2026-20737

Exposure of sensitive information to an unauthorized actor for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable...

CVE-2026-20734

The CVE-2026-20734 entry concerns firmware in Intel AMT and Intel Standard Manageability. The root cause is improper initialization in certain firmware, leading to an information disclosure. A local attacker with privileged user status and a low attack complexity could trigger data exposure witho...

CVE-2026-20716

Improper access control for some IntelR Processors within Ring 3: User Applications may allow an escalation of privilege. Simple hardware adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local...

CVE-2026-20715

CVE-2026-20715 involves improper input validation in some firmware for Intel AMT and Intel Standard Manageability. A network-adjacent, unauthenticated attacker with low complexity and no user interaction could cause a denial of service via network access. The impact is limited to availability (hi...

CVE-2026-20708

CVE-2026-20708 affects the Intel AMT and Intel Standard Manageability subsystem. The issue is described as insertion of sensitive information into a log file, enabling information disclosure. The entry indicates a network-adjacent attacker with high privileges and high attack complexity could cau...

CVE-2026-20708

Insertion of sensitive information into log file in the subsystem for the IntelR AMT and IntelR Standard Manageability may allow an information disclosure. Network adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur v...

CVE-2026-20702

Protection mechanism failure for some IntelR Data Center Attestation Primitives IntelR DCAP may allow information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network...

PT-2026-70354

Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description An Incorrect Authorization issue allows an attacker to execute arbitrary code in the context of the current user. The vulnerable component is restricted to an administrative network zone b...

PT-2026-70277

Name of the Vulnerable Software and Affected Versions IntelR TDX module affected versions not specified Description Insecure storage of sensitive information within Ring 0: Trust Domain may allow information disclosure. A system software adversary with privileged user access could potentially...

PT-2026-70781

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An Integer Underflow Wrap or Wraparound issue exists, which occurs when an arithmetic operation results in a value smaller than the minimum representable value for the data...

PT-2026-70782

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description Improper input validation allows an attacker to bypass security features and obtain unauthorized limited write access. This issue can be exploited without any user interaction...

CVE-2026-27302: Incorrect Authorization

Adobe Campaign Classic ACC is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

PT-2026-70346

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An Improper Encoding or Escaping of Output issue allows a low-privileged attacker to bypass security features. This can lead to limited unauthorized write acces...

PT-2026-70378

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description CAI Content Credentials contains a NULL Pointer Dereference issue, which occurs when a program attempts to read or write to a memory address that is NULL, typically causing th...

PT-2026-70331

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An Incorrect Authorization issue allows a low-privileged attacker to achieve privilege escalation. This flaw enables unauthorized read and write access and can ...

PT-2026-70341

is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue does not require user...

PT-2026-70349

Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description ColdFusion uses a broken or risky cryptographic algorithm, which could allow an attacker to disclose sensitive memory and information. This issue can be exploited without any user...

PT-2026-70375

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An Integer Underflow Wrap or Wraparound issue exists, which occurs when an arithmetic operation results in a value smaller than the minimum representable value for the data...

PT-2026-70817

Name of the Vulnerable Software and Affected Versions Magento Open Source affected versions not specified Adobe Commerce affected versions not specified Adobe Commerce B2B affected versions not specified Description An incorrect authorization flaw exists that allows a low-privileged remote attack...

PT-2026-70351

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An Incorrect Authorization issue allows for a security feature bypass. An attacker can bypass security measures to obtain limited unauthorized read and write...