PT-2026-70755

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description Improper input validation allows an unauthorized attacker to disclose sensitive information locally and affect the system. Recommendations At the moment, there is no informatio...

PT-2026-70179

An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header "Grpc-Metadata-USER". This can lead to an account takeover attack from a user with low privileges to administrator...

PT-2026-70675

Name of the Vulnerable Software and Affected Versions Windows Autopilot affected versions not specified Description A double free issue in Windows Autopilot allows an authorized attacker to elevate privileges locally. A double free occurs when the system attempts to free the same memory location...

PT-2026-70064

Name of the Vulnerable Software and Affected Versions Crafty Controller affected versions not specified Description Path traversal exists in the server import and admin file upload features. This allows a remote, authenticated attacker to upload files to arbitrary paths accessible to the...

PT-2026-70630

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

PT-2026-70692

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description An integer overflow or wraparound occurs in Windows DNS, which allows an authorized attacker to elevate privileges locally and affect the system. An integer overflow is a condition where ...

Malicious code in upshift-config (npm)

upshift-config is a malicious npm package — a renamed repack of a brand-hijack squat of the legitimate scoped package @augustdigital/sdk. The version 0.5.14 is fabricated to imply a release history the package does not have it is a first-ever publish. Its body is byte-identical to augustdigital-s...

PT-2026-70744

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A heap-based buffer overflow occurs in Windows DNS, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that happe...

PT-2026-70486

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A use-after-free condition in the Windows Telephony Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

PT-2026-70395

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

PT-2026-70647

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges over a network, enabling them to affect the system. Recommendations At t...

PT-2026-70402

Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...

PT-2026-70489

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A use-after-free condition in the Windows Telephony Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

PT-2026-70550

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment...

PT-2026-70633

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A buffer over-read allows an unauthorized attacker to execute arbitrary code locally and remotely, which can affect the system. A buffer over-read occurs when a program reads mo...

PT-2026-70776

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A heap-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issu...

PT-2026-70698

Name of the Vulnerable Software and Affected Versions Windows Storage Port Driver affected versions not specified Description A heap-based buffer overflow exists in the Windows Storage Port Driver. This issue occurs due to an integer overflow, which allows an authorized attacker to elevate...

PT-2026-70605

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized attacker...

PT-2026-70617

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A stack-based buffer overflow allows an unauthorized attacker to execute arbitrary code locally and remotely, potentially affecting the entire system. A stack-based buffer overflow...

PT-2026-70553

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment...