PT-2026-70686

Name of the Vulnerable Software and Affected Versions Windows iSCSI Target Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows iSCSI Target Service. This issue allows an unauthorized remote attacker to execute arbitrary code over a network,...

PT-2026-70476

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Cloud Files Mini Filter Driver. This issue allows an authorized attacker to elevate privileges locally on the...

PT-2026-70403

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A race condition occurs in the Windows Telephony Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileg...

PT-2026-70428

Name of the Vulnerable Software and Affected Versions Application Information Services affected versions not specified Description A use-after-free issue in Application Information Services allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw tha...

PT-2026-70437

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations A...

PT-2026-70778

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An out-of-bounds write allows an unauthorized attacker to execute arbitrary code locally and remotely, potentially affecting the entire system. An out-of-bounds write occurs when a program write...

PT-2026-70339

Untrusted search path for some IntelR Performance Counter Monitor IntelR PCM before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

PT-2026-70740

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Incorrect authorization allows an unauthorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information about a newer version that...

PT-2026-70534

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description An out-of-bounds read in the Windows SMB Client allows an unauthorized attacker to disclose sensitive information over a network, which can subsequently affect the system. An...

PT-2026-70196

A vulnerability has been identified in Siemens License Server SLS All versions V5.3. The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application...

PT-2026-70455

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use-after-free condition occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue where an...

PT-2026-70689

Name of the Vulnerable Software and Affected Versions Windows iSCSI Target Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows iSCSI Target Service. This issue allows an unauthorized attacker to cause a denial of service over a network. A...

PT-2026-70386

Name of the Vulnerable Software and Affected Versions Windows LUAFV affected versions not specified Description A heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap...

PT-2026-70462

Name of the Vulnerable Software and Affected Versions Windows Program Compatibility Assistant Service affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows Program Compatibility Assistant Service. This issue allows an authorized attacker to...

PT-2026-70564

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper authentication allows an authorized attacker to elevate privileges over a network, enabling them to affect the system. Recommendations At the moment, there is no...

PT-2026-70719

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70599

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to cause a denial of service over a network. Deserialization is the process of converting a data stream back...

PT-2026-70623

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An integer overflow or wraparound occurs in Microsoft Office, which could allow an unauthorized attacker to execute arbitrary code locally or remotely, potentially affecting the enti...

PT-2026-70766

Name of the Vulnerable Software and Affected Versions Microsoft Office Outlook affected versions not specified Description An integer overflow or wraparound occurs, allowing an unauthorized attacker to execute arbitrary code over a network and affect the system. An integer overflow is a condition...

PT-2026-70214

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager versions prior to 2024 SU7 Description An issue in the Core of the software allows a remote authenticated attacker to gain full write control over an S3 bucket used for session recording storage. This is caused by...