PT-2026-70387

Name of the Vulnerable Software and Affected Versions Microsoft Azure Kubernetes Service affected versions not specified Description Missing authentication for a critical function allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...

PT-2026-70710

Improper neutralization of special elements used in a command 'command injection' in Microsoft Office allows an authorized attacker to elevate privileges locally...

PT-2026-70188

A vulnerability has been identified in LOGO! Soft Comfort All versions V9. The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force...

PT-2026-70909

Name of the Vulnerable Software and Affected Versions SonicWall Email Security affected versions not specified Description An improper control of code generation allows an authenticated attacker with access to the restricted CLI to perform a local privilege escalation. By injecting arbitrary OS...

PT-2026-70532

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use-after-free condition in the Windows Kernel allows an authorized attacker to elevate privileges locally, enabling them to affect the system. Use-after-free is a memory corruption...

PT-2026-70496

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An integer overflow in the Windows HTTP.sys driver can lead to a heap-based buffer overflow. This allows an authorized attacker to elevate privileges locally on the system...

PT-2026-70499

Name of the Vulnerable Software and Affected Versions Windows Management Instrumentation affected versions not specified Description An out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose sensitive information locally and affect the system. An...

PT-2026-70442

Name of the Vulnerable Software and Affected Versions Windows Display Enhancement Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Display Enhancement Service. This issue allows an authorized attacker to elevate privileges locally on the syste...

PT-2026-70588

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A heap-based buffer overflow in the Windows DWM Core Library allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program...

PT-2026-70586

Name of the Vulnerable Software and Affected Versions Capability Access Management Service camsvc affected versions not specified Description A use-after-free condition in the Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally. Use-after-free i...

PT-2026-70449

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A heap-based buffer overflow occurs in the Windows Kernel, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue...

PT-2026-70445

Name of the Vulnerable Software and Affected Versions Windows USB Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows USB Driver, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruptio...

PT-2026-70434

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations A...

PT-2026-70614

Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...

PT-2026-70358

Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect OAuth callback endpoint embeds the user-supplied code query parameter directly into an inline script block without proper escaping. A crafted request to /api/redirect with a malicious code value can...

PT-2026-70333

Uncontrolled search path for some EquiTriton before version f5ddbb5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...

PT-2026-70392

Name of the Vulnerable Software and Affected Versions Windows Narrator Braille affected versions not specified Description An untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about...

PT-2026-70453

Name of the Vulnerable Software and Affected Versions Windows Defender Firewall Service affected versions not specified Description Missing authorization in the Windows Defender Firewall Service allows an authorized attacker to locally bypass a security feature, which can affect the system...

PT-2026-70452

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description A use-after-free condition in the Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

PT-2026-70714

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...