PT-2026-70534

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description An out-of-bounds read in the Windows SMB Client allows an unauthorized attacker to disclose sensitive information over a network, which can subsequently affect the system. An...

CVE-2026-62782: Out-of-bounds Read

Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network...

CVE-2026-62790: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network...

CVE-2026-56168

Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network...

CVE-2026-54997

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally...

Windows SMB Information Disclosure Vulnerability

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally...

CVE-2026-57089: Use After Free

Use after free in Windows SMB Server Network Transport Driver srvnet.sys allows an unauthorized attacker to execute code over a network...

CVE-2026-50360: Incorrect Implementation of Authentication Algorithm

Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-56168: NULL Pointer Dereference

Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network...

CVE-2026-58531: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB allows an authorized attacker to elevate privileges over a network...

CVE-2026-50690: Use of Uninitialized Resource

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally...

CVE-2026-49801: Use of Uninitialized Resource

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally...

CVE-2026-54997: Use of Uninitialized Resource

Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally...

Exploit for Improper Access Control in Microsoft

CVE-2025-33073 — Windows SMB Client NTLM Reflection EoP !CV...

RLSA-2026:32990 Important: cifs-utils security update

The SMB/CIFS protocol is a standard file sharing protocol widely deployed on Microsoft Windows machines. The cifs-utils packages contain tools for mounting shares on Linux using the SMB/CIFS protocol. The tools in this package work in conjunction with support in the kernel to allow one to mount a...

CVE-2026-40410

Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally...

CVE-2026-40410: Use After Free

Use after free in Windows SMB Client allows an authorized attacker to elevate privileges locally...

CVE-2026-33682 Streamlit on Windows has Unauthenticated SSRF Vulnerability (NTLM Credential Exposure)

Streamlit is a data oriented application development framework for python. Streamlit Open Source versions prior to 1.54.0 running on Windows hosts have an unauthenticated Server-Side Request Forgery SSRF vulnerability. The vulnerability arises from improper validation of attacker-supplied...

CVE-2026-24294

Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally...

Server-side Request Forgery (SSRF)

Overview streamlit is a The fastest way to build data apps in Python Affected versions of this package are vulnerable to Server-side Request Forgery SSRF due to improper validation of filesystem paths in the ComponentRequestHandler process. An attacker can trigger outbound SMB authentication...