195351 matches found
CVE-2026-44768
SAP CRM WebClient UI allows an attacker to inject and execute malicious scripts in the context of the application due to the absence of a Content Security Policy CSP configuration for certain restrictive directives. This vulnerability has a low impact on the integrity of the application...
EUVD-2026-43585
SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configurations. This allows an unauthenticated remote attacker to craft a malicious link which, when clicked by a victim, could lead to unauthorized access. Successful exploitation results...
PT-2026-58141
Name of the Vulnerable Software and Affected Versions Microsoft Printer Drivers affected versions not specified Description A use-after-free condition exists in Microsoft Printer Drivers. This issue allows an authorized attacker with local access to elevate their privileges on the system...
CVE-2026-56170
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
PT-2026-58329
Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description A use-after-free flaw in the Windows Runtime allows an authorized network user to elevate their privileges to administrator level. Use-after-free is a memory corruption issue that occurs...
PT-2026-58145
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Insufficient granularity of access control in the Windows StateRepository API allows an authorized attacker to elevate privileges locally. Recommendations Apply the July patch to resolve this...
PT-2026-58275
Name of the Vulnerable Software and Affected Versions Windows Print Spooler affected versions not specified Description Concurrent execution using shared resource with improper synchronization race condition in Windows Print Spooler Components allows an authorized attacker to execute arbitrary co...
PT-2026-58672
Name of the Vulnerable Software and Affected Versions Windows Client-Side Caching CSC Service affected versions not specified Description A use-after-free condition in the Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memo...
PT-2026-58455
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Web Proxy Auto-Discovery Protocol WPAD. This flaw allows an authorized attacker with local access to elevate their privileges on the system....
PT-2026-58302
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network. This issue enables remote attackers to skip the...
Security Bulletin: NVIDIA TensorRT - July 2026
NVIDIA has released a software update for NVIDIA® TensorRT. To protect your system, clone or update this software to TensorRT v11.0.0 and Polygraphy 0.50.0 from the NVIDIA/TensorRT GitHub repo, TensorRT product page, the network repository, or Python package index TensorRT, Polygraphy. Go to NVID...
PT-2026-58424
Name of the Vulnerable Software and Affected Versions Windows 10 Windows 11 Windows Server versions 2012 through 2025 Description A heap-based buffer overflow exists in Windows Message Queuing MSMQ, a service used for asynchronous communication between applications. This flaw allows an unauthoriz...
PT-2026-58187
Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Direct affected versions not specified Description An integer overflow or wraparound issue exists in Windows Storage Spaces Direct. This flaw allows an unauthorized attacker with physical access to the system to execute...
PT-2026-58123
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Bluetooth Port Driver. This issue allows an unauthorized attacker located on an adjacent network to execute arbitrary code and...
PT-2026-58714
Name of the Vulnerable Software and Affected Versions .NET versions 8 through 10 .NET Framework affected versions not specified Description An issue exists where resources are allocated without limits or throttling, allowing an unauthenticated attacker to drain system resources over a network and...
PT-2026-58650
Name of the Vulnerable Software and Affected Versions Microsoft NAT Helper Components affected versions not specified Description A use-after-free condition in the ipnathlp.dll component allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...
PT-2026-58375
Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows Server 2025 affected versions not specified Description A use after free flaw in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally, enabling a user with...
PT-2026-58850
Name of the Vulnerable Software and Affected Versions mastergo-design mastergo-magic-mcp versions prior to 0.2.1 Description Path traversal occurs in the execute function within the mastergo/component-workflow.md file of the mcp getComponentGenerator component. This issue arises from the improper...
PT-2026-58293
Name of the Vulnerable Software and Affected Versions Mojolicious versions 4.59 through 9.47 Description The software exposes a stable representation of the session CSRF token to a BREACH compression oracle. This occurs because the csrf token function generates and caches one token per session,...
PT-2026-58454
Name of the Vulnerable Software and Affected Versions Windows USB Hub Driver affected versions not specified Description An untrusted pointer dereference in the Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. A pointer dereference occurs when a program accesses...