CVE-2026-56170

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

PT-2026-58806

Name of the Vulnerable Software and Affected Versions .NET versions prior to 8.0.29 .NET versions prior to 9.0.18 .NET versions prior to 10.0.10 Description An issue exists where the allocation of resources occurs without limits or throttling, allowing an unauthorized attacker to cause a denial o...

EulerOS 2.0 SP10 : libssh2 (EulerOS-SA-2026-2659)

According to the versions of the libssh2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is the function userauthpassword of the file...

PT-2026-58155

Name of the Vulnerable Software and Affected Versions Windows Clipboard Server affected versions not specified Description A race condition occurs in the Windows Clipboard Server due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges...

PT-2026-58191

Name of the Vulnerable Software and Affected Versions Windows Server affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges locally, effectively turning a basic login into a mechanism for privilege escalation. Recommendations Deploy...

PT-2026-58327

Name of the Vulnerable Software and Affected Versions Windows affected versions prior to July 2026 patchday Description An incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally. This issue occurs due to a bad type cast, which is a...

CVE-2025-56363

A null pointer dereference vulnerability exists in the Matter SDK connectedhomeip before 1.4.0, affecting the ReadRevisionAttribute function used in multiple clusters Channel, Account Login, TargetNavigator, etc.. The function lacks proper validation of the delegate pointer before dereferencing. ...

PT-2026-58487

Name of the Vulnerable Software and Affected Versions Windows 10 affected versions not specified Windows 11 affected versions not specified Windows Server 2016 affected versions not specified Windows Server 2019 affected versions not specified Windows Server 2022 affected versions not specified...

PT-2026-58384

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Insufficient granularity of access control in the Windows Filtering Platform WFP, which acts as a traffic management system for the Windows Firewall, allows an authorized attacker to elevate...

PT-2026-58668

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A use-after-free and double-free condition exists in the DirectX Graphics Kernel dxgkrnl. The issue occurs during the rollback process of a failed D3DKMTCreateAllocation function call...

PT-2026-58607

Name of the Vulnerable Software and Affected Versions Windows 10 Windows 11 Windows Server affected versions not specified Description An uninitialized resource flaw in the Windows Remote Desktop Protocol RDP allows an unauthorized and unauthenticated attacker to execute arbitrary code over a...

PT-2026-58695

Name of the Vulnerable Software and Affected Versions Microsoft Configuration Manager version 2509 Description Improper access control allows an authorized attacker to elevate privileges over a network. This issue can be part of an exploit chain involving broken access, CAB arbitrary-write path...

PT-2026-58143

Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Direct affected versions not specified Description An integer overflow or wraparound occurs in Windows Storage Spaces Direct, which could allow an unauthorized attacker to elevate privileges through a physical attack...

PT-2026-58661

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An integer overflow or wraparound in the Remote Desktop Protocol RDP allows an unauthorized attacker to execute arbitrary code over a network. Recommendations At the moment, there i...

PT-2026-58616

Name of the Vulnerable Software and Affected Versions Windows Remote Access Service Infrastructure affected versions not specified Description An integer overflow or wraparound in the Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network...

PT-2026-58159

Name of the Vulnerable Software and Affected Versions Windows HTTP.sys affected versions not specified Description An issue exists in Windows HTTP.sys where resources are allocated without limits or throttling. This allows an unauthorized attacker to cause a denial-of-service condition over a...

PT-2026-58422

Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description A missing authentication check for a critical function in the Windows Server Update Service allows an authorized attacker to elevate privileges over a network...

PT-2026-58718

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Microsoft Visual Studio affected versions not specified Description An issue exists in the deserialization mechanism of .NET and Microsoft Visual Studio. Deserialization is the process of converting a strea...

PT-2026-58196

Name of the Vulnerable Software and Affected Versions Windows Spaceport.sys affected versions not specified Description Missing authentication for a critical function in the Spaceport.sys driver allows an authorized attacker to elevate privileges locally on the system. Recommendations At the...

PT-2026-58716

Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an unauthorized attacker t...