CVE-2026-73006: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

CVE-2026-69829: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...

CVE-2026-69291: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-12744: Deserialization of Untrusted Data

A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code on the server...

PT-2026-87521

Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

PT-2026-87467

Incorrect conversion between numeric types in Microsoft JScript allows an unauthorized attacker to execute code over a network...

PT-2026-87530

Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

PT-2026-87515

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

PT-2026-87680

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-69518: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network...

PT-2026-87598

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network...

PT-2026-88024

Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

PT-2026-88250

In tt face colr blend layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ROS-20260908-73-0110

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to the lack of measures taken to neutralize special elements during the processing of the unsafegitcloneoptions parameter. Exploiting this vulnerability could allow a remote attacker to execute...

CVE-2026-78463: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

ROS-20260908-73-0029

The vulnerability in freerdp3 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-88162

In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level configuration files in Jenkins such as the global configuration and jobs can appear as nested field values in user-submitted config.xml documents and subsequently...

PT-2026-88004

Improper control of generation of code 'code injection' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

PT-2026-88256

In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88251

In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...