286337 matches found
PT-2026-88013
This Microsoft Patch Tuesday, among with the historical 974 ! bugs patched, I contributed three. - Microsoft Word Remote Code Execution Vulnerability CVE-2026-78510 https://t.co/7UyCIwJTji - Microsoft Office Outlook Remote Code Execution Vulnerability CVE-2026-78509 https://t.co/Nn3oKfDPL4 -...
PT-2026-88014
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
PT-2026-88256
In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87515
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...
PT-2026-88024
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
PT-2026-87645
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
PT-2026-87087
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
PT-2026-88036
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
PT-2026-88004
Improper control of generation of code 'code injection' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
PT-2026-88162
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level configuration files in Jenkins such as the global configuration and jobs can appear as nested field values in user-submitted config.xml documents and subsequently...
PT-2026-87890
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
PT-2026-87314
Integer overflow or wraparound in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
PT-2026-87129
Craft CMS versions before 5.10.12 contain a remote code execution vulnerability in the element-index endpoint that allows authenticated content editors to instantiate arbitrary classes through the criteria parameter. Attackers can inject a malicious class via criteriawithTransforms0class that...
PT-2026-87085
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
PT-2026-88738
Out of bounds write in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
PT-2026-87688
We recently used LYNXRAY to independently discover an unauthenticated remote code execution vulnerability affecting certain Windows versions CVE-2026-69732. Unfortunately, MSRC determined that our submission duplicated an earlier report by Seung Chan Kim. Although we narrowly missed the first...
PT-2026-87867
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
PT-2026-87598
Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network...