PT-2026-70537

Name of the Vulnerable Software and Affected Versions Windows LDAP affected versions not specified Description A heap-based buffer overflow in the Lightweight Directory Access Protocol LDAP allows an unauthorized attacker to execute arbitrary code over a network, potentially compromising the...

PT-2026-70541

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A heap-based buffer overflow occurs in the Windows SMB Server, which allows an authorized attacker to execute arbitrary code over a network and affect the system. A heap-based buff...

PT-2026-70583

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A use-after-free condition in the Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occur...

PT-2026-70533

Name of the Vulnerable Software and Affected Versions RPC Runtime affected versions not specified Description A heap-based buffer overflow in the RPC Runtime allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs...

PT-2026-70616

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A numeric truncation error allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially affecting the system. Recommendations At the moment, there ...

PT-2026-70607

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to execute arbitrary code locally and remotely, which can affect the system. An out-of-bounds read occurs when a program reads...

PT-2026-70633

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A buffer over-read allows an unauthorized attacker to execute arbitrary code locally and remotely, which can affect the system. A buffer over-read occurs when a program reads mo...

PT-2026-70605

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized attacker...

PT-2026-70617

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A stack-based buffer overflow allows an unauthorized attacker to execute arbitrary code locally and remotely, potentially affecting the entire system. A stack-based buffer overflow...

PT-2026-70589

Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description An integer overflow or wraparound occurs, allowing an unauthorized attacker to execute arbitrary code locally or remotely, which can affect the system. An integer overflow is a conditi...

PT-2026-70678

Name of the Vulnerable Software and Affected Versions Windows Autopilot affected versions not specified Description A use-after-free condition in Windows Autopilot enables an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...

CVE-2026-48120

Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, autorestore.kak script can be exploited by malicious backup files leading to arbitrary kakoune and shell commands being executed by simply opening a file. Kakoune 2026.05.21 fixes the issue. As a workaround, a...

PT-2026-70184

Name of the Vulnerable Software and Affected Versions Solid Edge SE2025 versions prior to V225.0 Update 15 Solid Edge SE2026 versions prior to V226.0 Update 7 Description An out of bounds read occurs when the application parses specially crafted PAR files. This flaw could allow an attacker to...

RockyLinux 9 : vim (RLSA-2026:38511)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:38511 advisory. vim: command injection when decompressing .tgz archives CVE-2026-46483 vim: Vim: Arbitrary Code Execution via crafted directory names CVE-2026-47162 vim...

MiracleLinux 9 : nginx:1.24 (AXSA:2026-1509:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1509:01 advisory. nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers CVE-2026-42055 Tenable has extracted t...

PT-2026-70832

Cursor is a code editor built for programming with AI. Prior to 3.1.2, Cursor IDE for macOS allows an agent running in Auto-Run Sandbox mode to replace a virtual environment's Python executable with a malicious wrapper that the Microsoft Python extension invokes outside the sandbox, allowing...

PT-2026-70618

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an unauthorized...

PT-2026-70474

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A use-after-free condition in Windows Win32K allows an authorized attacker to elevate privileges locally. A use-after-free is a memory corruption issue that occurs when an application...

PT-2026-70844

Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds to all interfaces on port 3444, permits cross-origin requests, and requires no authentication. The...

PT-2026-70606

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Deserialization is the process of...