CVE-2026-70222: Relative Path Traversal

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

PT-2026-112468

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description Improper access control allows an authorized attacker to disclose sensitive information locally and affect the system. Recommendations At the moment, there is no information...

PT-2026-112542

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description An out-of-bounds read exists in Windows Error Reporting, which allows an authorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds...

CVE-2026-83747: Out-of-bounds Read

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83719: Servicing Stack Updates Information Disclosure Vulnerability

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

CVE-2026-70173: Out-of-bounds Read

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

CVE-2026-109526: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component exportData Endpoint. Such manipulation leads to information disclosure. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...

CVE-2026-70580: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally...

Microsoft Windows: CVE-2026-69736: Windows Credential Manager Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Manager allows an authorized attacker to elevate privileges locally...

PT-2026-112075

Name of the Vulnerable Software and Affected Versions Windows Credential Manager affected versions not specified Description An issue exists where concurrent execution using a shared resource with improper synchronization, known as a race condition, allows an authorized attacker to elevate...

Microsoft Windows: CVE-2026-70580: Windows Credential Guard Spoofing Vulnerability

Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally...

Microsoft Windows: CVE-2026-96927: Windows NTFS Information Disclosure Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-81964: Use of Hard-coded Credentials

Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally...

PT-2026-112070

Name of the Vulnerable Software and Affected Versions Windows Network File System affected versions not specified Description An out-of-bounds read in the Windows Network File System allows an authorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds re...

SUSE SLES15 Security Update : unbound (SUSE-SU-2026:4624-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4624-1 advisory. - CVE-2026-77860: 'serve-expired' can bypass Unbound 'wait-limit' bsc1280403. - CVE-2026-77955: Possible ZONEMD verification bypass...

UBUNTU-CVE-2026-58280

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-112264

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description An issue exists where resources are allocated without limits or throttling, which allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the...

PT-2026-113042

Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31...

CVE-2026-70186: Deadlock

Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-96231: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...