PT-2026-70288

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description An improper conditions check within Ring 2: Device Drivers may allow a network adversary to cause a denial of service. This issue can be triggered by ...

PT-2026-70586

Name of the Vulnerable Software and Affected Versions Capability Access Management Service camsvc affected versions not specified Description A use-after-free condition in the Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally. Use-after-free i...

PT-2026-70710

Improper neutralization of special elements used in a command 'command injection' in Microsoft Office allows an authorized attacker to elevate privileges locally...

CVE-2026-51583

An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery SSRF via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address...

PT-2026-70489

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A use-after-free condition in the Windows Telephony Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

PT-2026-70733

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70333

Uncontrolled search path for some EquiTriton before version f5ddbb5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...

PT-2026-70528

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment...

PT-2026-70392

Name of the Vulnerable Software and Affected Versions Windows Narrator Braille affected versions not specified Description An untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about...

Malicious code in upshift-config (npm)

upshift-config is a malicious npm package — a renamed repack of a brand-hijack squat of the legitimate scoped package @augustdigital/sdk. The version 0.5.14 is fabricated to imply a release history the package does not have it is a first-ever publish. Its body is byte-identical to augustdigital-s...

PT-2026-70744

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A heap-based buffer overflow occurs in Windows DNS, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that happe...

PT-2026-70429

Name of the Vulnerable Software and Affected Versions Windows Accessibility Infrastructure ATBroker.exe affected versions not specified Description Improper link resolution before file access, also known as link following, in the Windows Accessibility Infrastructure ATBroker.exe allows an...

PT-2026-70445

Name of the Vulnerable Software and Affected Versions Windows USB Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows USB Driver, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruptio...

PT-2026-70486

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A use-after-free condition in the Windows Telephony Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

PT-2026-70630

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

PT-2026-70617

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A stack-based buffer overflow allows an unauthorized attacker to execute arbitrary code locally and remotely, potentially affecting the entire system. A stack-based buffer overflow...

PT-2026-70541

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A heap-based buffer overflow occurs in the Windows SMB Server, which allows an authorized attacker to execute arbitrary code over a network and affect the system. A heap-based buff...

PT-2026-70427

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations A...

PT-2026-70358

Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect OAuth callback endpoint embeds the user-supplied code query parameter directly into an inline script block without proper escaping. A crafted request to /api/redirect with a malicious code value can...

PT-2026-70687

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description A buffer over-read in the Windows SMB Client allows an unauthorized attacker to disclose sensitive information over a network, which can subsequently affect the system. A buffer...