PT-2026-47874

Name of the Vulnerable Software and Affected Versions Microsoft Windows DNS affected versions not specified Description A heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more...

Microsoft Windows UEFI 处理逻辑错误漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There are security vulnerabilities in Microsoft Windows UEFI. Attackers can exploit these vulnerabilities to bypass certain features. The following products and versions are affected: Windows 11...

KLA91097 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, perform cross-site scripting attack, bypass security restrictions, cause denial of service, obtain sensitive information, execute arbitrary code, spoof user interface...

PT-2026-48016

Name of the Vulnerable Software and Affected Versions Windows BitLocker affected versions not specified Description A protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature through a physical attack, which can subsequently affect the system...

Microsoft Windows RDP 缓冲区错误漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. The Microsoft Windows RDP component has a buffer error vulnerability. The following products and versions are affected: Windows 10 Version 1809 for 32-bit systems, Windows 10 Version 1809 for...

CVE-2026-39908 OpenBullet2 0.3.2 NTLMv2 Hash Disclosure via UNC Path Proxy Source

OpenBullet2 through version 0.3.2 on Windows contains a credential disclosure vulnerability that allows remote attackers to capture the NTLMv2 hash of the process user by configuring a job proxy source with a UNC path pointing to an attacker-controlled server. When the job starts, the application...

EUVD-2026-34448

Integer overflow in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-9932

Use after free in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

The vulnerability of the NTFS file system in Windows operating systems, related to buffer overflows in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of the NTFS file system in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems allows a perpetrator to cause a service failure.

The vulnerability of the LDAP service protocol implementation in Microsoft Windows operating systems is related to pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-9112

Use after free in GPU in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

The vulnerability of the BitLocker component in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the BitLocker component in Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the GDI component in Windows operating systems, allowing a hacker to execute arbitrary code

The vulnerability of the GDI component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the cloud platform used for creating and launching automated work processes in Azure Logic Apps exposes operating systems running on Windows to exploitation. This allows attackers to escalate their privileges.

The vulnerability of the cloud platform used for creating and launching automated work processes in Azure Logic Apps, when operating on Windows operating systems, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...

The vulnerability of the Projected File System component in Windows operating systems, which allows attackers to enhance their privileges

The vulnerability of the Projected File System component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Filtering Platform (WFP), a filtering platform for Windows operating systems, allows attackers to circumvent existing security restrictions.

The vulnerability of the Windows Filtering Platform WFP in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

The vulnerability of the Rich Text Edit Control text editor in Windows operating systems, which allows attackers to exploit their privileges.

The vulnerability of the Rich Text Edit Control text editor in Windows operating systems is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Netlogon service in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Netlogon service in Windows operating systems is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-40413

Windows TCP/IP Denial of Service Vulnerability...

The vulnerability of the Storport Miniport Driver for Windows operating systems allows a hacker to trigger a service failure.

The vulnerability of the Storport Miniport Driver for Windows operating systems is related to pointer aliasing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...