CVE-2026-108939

A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the function isglobalip of the file mistralrs-server-core/src/mediasource.rs. Such manipulation of the argument ip leads to server-side request forgery. The attack can be launched remotely. The exploit has been...

CVE-2026-108942 philz1337x clarity-upscaler Extra Networks Card Rendering ui_extra_networks.py create_html_for_item cross site scripting

A security flaw has been discovered in philz1337x clarity-upscaler up to cfbdb842c6c839c8e97741722b8cf9a4b7662d98. This impacts the function createhtmlforitem of the file modules/uiextranetworks.py of the component Extra Networks Card Rendering. The manipulation of the argument Description result...

PT-2026-112884

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83832: Windows Spaceport.sys Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

PT-2026-112199

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description An out-of-bounds read exists in Windows DNS, which allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment, there is no information about a...

Microsoft Windows: CVE-2026-70074: Windows DNS Information Disclosure Vulnerability

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally...

CVE-2026-108468: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83774: Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96950: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-83500: URL Redirection to Untrusted Site

Url redirection to untrusted site 'open redirect' in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

Microsoft Windows: CVE-2026-83500: Windows BitLocker Security Feature Bypass Vulnerability

Url redirection to untrusted site 'open redirect' in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

PT-2026-112700

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description Incorrect authorization in the Windows SMB Client allows an authorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information about a...

PT-2026-112097

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally. Additionally, the issue may allow remote attackers to execute arbitrary code and...

Microsoft Windows: CVE-2026-70262: WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network...

DevTools Suite DoS

The vulnerability in Google Chrome and Microsoft Edge DevTools web development tools is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

CVE-2026-70186

Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...

PT-2026-113042

Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31...

CVE-2026-58280: Uncontrolled Recursion

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-70186: Deadlock

Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...

PT-2026-111275

Name of the Vulnerable Software and Affected Versions storyicon comfyui segment anything versions up to ab6395596399d5048639cdab7e44ec9fae857a93 Description Code injection is possible via remote attack in the GroundingDINO Model Loading component. The issue exists within the SLConfig. file2dict...