PT-2026-58293

Name of the Vulnerable Software and Affected Versions Mojolicious versions 4.59 through 9.47 Description The software exposes a stable representation of the session CSRF token to a BREACH compression oracle. This occurs because the csrf token function generates and caches one token per session,...

PT-2026-58187

Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Direct affected versions not specified Description An integer overflow or wraparound issue exists in Windows Storage Spaces Direct. This flaw allows an unauthorized attacker with physical access to the system to execute...

PT-2026-57958

A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...

PT-2026-58302

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network. This issue enables remote attackers to skip the...

PT-2026-58375

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows Server 2025 affected versions not specified Description A use after free flaw in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally, enabling a user with...

PT-2026-58275

Name of the Vulnerable Software and Affected Versions Windows Print Spooler affected versions not specified Description Concurrent execution using shared resource with improper synchronization race condition in Windows Print Spooler Components allows an authorized attacker to execute arbitrary co...

PT-2026-58236

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow in the Remote Desktop Client allows an unauthorized attacker to execute code over a network. A heap-based buffer overflow occurs when a program writes...

PT-2026-58123

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Bluetooth Port Driver. This issue allows an unauthorized attacker located on an adjacent network to execute arbitrary code and...

PT-2026-58141

Name of the Vulnerable Software and Affected Versions Microsoft Printer Drivers affected versions not specified Description A use-after-free condition exists in Microsoft Printer Drivers. This issue allows an authorized attacker with local access to elevate their privileges on the system...

PT-2026-58638

Name of the Vulnerable Software and Affected Versions Windows RDP affected versions not specified Description An authorized attacker can disclose information over a network due to the use of an uninitialized resource. This issue allows attackers to obtain sensitive information and affect the...

PT-2026-58870

Name of the Vulnerable Software and Affected Versions Grav Login Plugin versions prior to 3.8.11 Description The Grav Login plugin allows a top-level GET request to be sent to the task URI parameter via the TaskServiceProvider without requiring a login-form nonce, an Origin check, or a Referer...

PT-2026-58714

Name of the Vulnerable Software and Affected Versions .NET versions 8 through 10 .NET Framework affected versions not specified Description An issue exists where resources are allocated without limits or throttling, allowing an unauthenticated attacker to drain system resources over a network and...

CVE-2026-56170

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

PT-2026-58454

Name of the Vulnerable Software and Affected Versions Windows USB Hub Driver affected versions not specified Description An untrusted pointer dereference in the Windows USB Hub Driver allows an authorized attacker to elevate privileges locally. A pointer dereference occurs when a program accesses...

PT-2026-58400

Name of the Vulnerable Software and Affected Versions Windows Connected User Experiences and Telemetry affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This flaw allows an authorized local attacker to elevate their...

PT-2026-58455

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Web Proxy Auto-Discovery Protocol WPAD. This flaw allows an authorized attacker with local access to elevate their privileges on the system....

PT-2026-58424

Name of the Vulnerable Software and Affected Versions Windows 10 Windows 11 Windows Server versions 2012 through 2025 Description A heap-based buffer overflow exists in Windows Message Queuing MSMQ, a service used for asynchronous communication between applications. This flaw allows an unauthoriz...

PT-2026-58145

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Insufficient granularity of access control in the Windows StateRepository API allows an authorized attacker to elevate privileges locally. Recommendations Apply the July patch to resolve this...

PT-2026-58262

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description Resource allocation without limits or throttling allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the moment, there is no information about...

PT-2026-58672

Name of the Vulnerable Software and Affected Versions Windows Client-Side Caching CSC Service affected versions not specified Description A use-after-free condition in the Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memo...