PT-2026-70601

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

HPESBHF05069 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01419, 2026.2 IPU, Intel Trust Domain Extensions (Intel TDX) module Advisory

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to 2.09 HFP 2026.05.00 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-31356 |...

VRT0011, Intel® Chipset Firmware Advisory

Summary: A potential security vulnerability for some Intel® Converged Security and Management Engine Intel® CSME and Intel® Server Platform Services Intel® SPS may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details:...

Metabase SQL Injection Vulnerability

Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, which can give them administrator access to the instance. From there, the attacker could change the application configuration, steal store...

PT-2026-70751

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally...

PT-2026-70418

Name of the Vulnerable Software and Affected Versions Microsoft Remote Registry Service affected versions not specified Description A null pointer dereference in the Microsoft Remote Registry Service allows an authorized attacker to cause a denial of service over a network. A null pointer...

PT-2026-70613

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An out-of-bounds read exists in Microsoft Office Word, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds re...

PT-2026-70440

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A race condition occurs in Windows DNS due to improper synchronization when using a shared resource. This allows an authorized attacker to execute arbitrary code over a network, potential...

PT-2026-70518

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment...

PT-2026-70466

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A use-after-free condition in the Windows Telephony Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

Linux Distros Unpatched Vulnerability : CVE-2026-71218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the JSONread function, which accepts a peer-controlled message leng...

PT-2026-70540

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use-after-free condition in the Windows Kernel allows an authorized attacker to elevate privileges locally, enabling them to affect the system. Use-after-free is a memory corruption...

PT-2026-70697

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description A server-side request forgery SSRF issue allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where an attacker can induce the server to make...

PT-2026-70291

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software affected versions not specified Description Improper conditions check within Ring 2 device drivers may allow a network adversary to cause a denial of service. This issue can be triggered by an unauthenticat...

PT-2026-70702

Name of the Vulnerable Software and Affected Versions Microsoft Azure Attestation service affected versions not specified Device Health Attestation Service affected versions not specified Description A race condition exists in the Microsoft Azure Attestation service and Device Health Attestation...

PT-2026-70688

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description An issue in Windows DNS allows an authorized attacker to elevate privileges locally, which can enable them to affect the system. Recommendations At the moment, there is no information abo...

PT-2026-70691

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is no...

PT-2026-70755

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description Improper input validation allows an unauthorized attacker to disclose sensitive information locally and affect the system. Recommendations At the moment, there is no informatio...

PT-2026-70179

An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header "Grpc-Metadata-USER". This can lead to an account takeover attack from a user with low privileges to administrator...

PT-2026-70675

Name of the Vulnerable Software and Affected Versions Windows Autopilot affected versions not specified Description A double free issue in Windows Autopilot allows an authorized attacker to elevate privileges locally. A double free occurs when the system attempts to free the same memory location...