CVE-2026-96216: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-112026

Use after free in Software Protection Platform SPP allows an authorized attacker to elevate privileges locally...

PT-2026-111275

Name of the Vulnerable Software and Affected Versions storyicon comfyui segment anything versions up to ab6395596399d5048639cdab7e44ec9fae857a93 Description Code injection is possible via remote attack in the GroundingDINO Model Loading component. The issue exists within the SLConfig. file2dict...

Microsoft Windows: CVE-2026-96852: Windows TCP/IP Elevation of Privilege Vulnerability

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

CVE-2026-69974: Out-of-bounds Read

Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96247: Windows Kernel-Mode Drivers Information Disclosure Vulnerability

Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...

CVE-2026-69650: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Windows Key Distribution Center allows an authorized attacker to elevate privileges locally...

CVE-2026-96843: Heap-based Buffer Overflow

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally...

CVE-2026-83866: Use After Free

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

PT-2026-111414

Name of the Vulnerable Software and Affected Versions conductor-oss conductor version 3.31.2 Description An issue exists in the API Tool Configuration component within the ListApiToolsTask.start function of the ListApiToolsTask.java file. Remote manipulation of the specUrl argument allows for...

PT-2026-111372

A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate Path Builder. Such manipulation leads to resource consumption. The attack can be launched remotely. The vendor was contacted early about this disclosure but...

PT-2026-111408

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-432BRP version 3.10B20 Description A stack-based buffer overflow occurs when manipulating the Name argument within the formTcpipSetup function located in the /goform/formTcpipSetup file. This issue allows a remote attacker to...

PT-2026-111405

Name of the Vulnerable Software and Affected Versions MosaicML Composer versions prior to 0.32.2 Description A path traversal issue exists in the Checkpoint Extraction component within the tarball.extractall function of the composer/utils/checkpoint.py file. This flaw allows a remote attacker to...

PT-2026-111584

A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of the component Dispatch Handler. This manipulation of the argument SystemBuffer causes privilege defined with unsafe actions. The attack...

PT-2026-111379

Name of the Vulnerable Software and Affected Versions SIMATIC WinCC versions 7.5 SIMATIC WinCC versions prior to 8.0 Update 11 SIMATIC WinCC versions prior to 8.1 Update 7 Description The application does not sufficiently restrict permissions assigned to a database role. This flaw allows an...

PT-2026-111388

A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...

PT-2026-111525

A flaw has been found in HBAI-Ltd Toonflow-app up to 1.1.8. The affected element is the function child process.exec of the file src/routes/setting/fileManagement/openFolder.ts of the component Open Folder Endpoint. Executing a manipulation of the argument path can lead to command injection. The...

PT-2026-111311

Name of the Vulnerable Software and Affected Versions Wavlink WL-WN592AX6 version 250422 Description A flaw in the wmapd Daemon allows for remote OS command injection. The issue resides within the system function, enabling an attacker to execute arbitrary operating system commands without...

PT-2026-111327

Name of the Vulnerable Software and Affected Versions AdithyaYelloju Restaurant-Management-System affected versions not specified Description An authorization bypass exists in the Order Management component. A remote attacker can manipulate the ID argument within the mysqli query function to bypa...

PT-2026-111312

A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This vulnerability affects unknown code of the file User/login.php of the component Login Form. Such manipulation of the argument email/passwd leads to improper...