Microsoft Windows: CVE-2026-103578: Windows Kernel Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack...

Microsoft SharePoint: CVE-2026-88166: Microsoft Office SharePoint Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft SharePoint: CVE-2026-70267: Microsoft Office SharePoint Remote Code Execution Vulnerability

Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

PT-2026-112880

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

Microsoft Exchange: CVE-2026-87695: Microsoft Exchange Server Elevation of Privilege Vulnerability

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-108133: Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Release of invalid pointer or reference in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

PT-2026-111424

Name of the Vulnerable Software and Affected Versions macrozheng mall versions prior to 1.0.4 Description A business logic error exists in the mall-portal component. A remote attacker can manipulate the coupon amount or pay amount arguments within the OmsPortalOrderServiceImpl function of the...

CVE-2026-109523: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Affected by this vulnerability is an unknown functionality of the file Admin/getclinic.php of the component AJAX Endpoint. The manipulation of the argument city/cid results i...

CVE-2026-109110: Improper Neutralization of Special Elements used in an OS Command

A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was...

PT-2026-112510

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A use-after-free condition in Windows NTFS enables an authorized attacker to elevate privileges locally. A use-after-free is a memory corruption issue that occurs when an application...

CVE-2026-95127

An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the assoutlineconstruct in libass/assrender.c...

PT-2026-116241

Уязвимость функции security.update user платформы для мониторинга безопасности и обнаружения угроз Wazuh связана с недостатками процедуры авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти существующие механизмы безопасности...

CVE-2026-70189: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

CVE-2026-70165: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-70196: Inefficient Algorithmic Complexity

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-70186: Deadlock

Deadlock in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-70196: Inefficient Algorithmic Complexity

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-70165: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-112287

Name of the Vulnerable Software and Affected Versions Microsoft.AspNetCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.AspNetCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 Microsoft.AspNetCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31...

Microsoft Windows: CVE-2026-87706: Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...