200927 matches found
PT-2026-70992
Name of the Vulnerable Software and Affected Versions Wazuh Manager affected versions not specified Description A deserialization of untrusted data issue exists in the Cluster DAPI Protocol, which allows a remote attacker to execute arbitrary code and perform arbitrary file read and write...
PT-2026-70466
Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A use-after-free condition in the Windows Telephony Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...
PT-2026-70402
Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally...
PT-2026-70398
Name of the Vulnerable Software and Affected Versions Microsoft .NET affected versions not specified Description An integer overflow or wraparound occurs in the .NET platform, which could allow an unauthorized attacker to elevate privileges locally. Integer overflow is a condition where an...
PT-2026-70614
Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...
PT-2026-70387
Name of the Vulnerable Software and Affected Versions Microsoft Azure Kubernetes Service affected versions not specified Description Missing authentication for a critical function allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...
PT-2026-70768
Name of the Vulnerable Software and Affected Versions GitHub Copilot affected versions not specified Visual Studio Code affected versions not specified Description Improper neutralization of special elements used in an OS command, known as OS command injection, allows an unauthorized attacker to...
PT-2026-70401
Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Missing authorization allows an unauthorized attacker to execute code over a network. Recommendations At the moment, there is no information about a newer version that contains a f...
PT-2026-70541
Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A heap-based buffer overflow occurs in the Windows SMB Server, which allows an authorized attacker to execute arbitrary code over a network and affect the system. A heap-based buff...
PT-2026-70288
Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi Software for Windows affected versions not specified Description An improper conditions check within Ring 2: Device Drivers may allow a network adversary to cause a denial of service. This issue can be triggered by ...
PT-2026-70453
Name of the Vulnerable Software and Affected Versions Windows Defender Firewall Service affected versions not specified Description Missing authorization in the Windows Defender Firewall Service allows an authorized attacker to locally bypass a security feature, which can affect the system...
PT-2026-70550
Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment...
PT-2026-70675
Name of the Vulnerable Software and Affected Versions Windows Autopilot affected versions not specified Description A double free issue in Windows Autopilot allows an authorized attacker to elevate privileges locally. A double free occurs when the system attempts to free the same memory location...
PT-2026-70553
Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment...
PT-2026-70188
A vulnerability has been identified in LOGO! Soft Comfort All versions V9. The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force...
PT-2026-70179
An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header "Grpc-Metadata-USER". This can lead to an account takeover attack from a user with low privileges to administrator...
PT-2026-70741
Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Visual Studio Code fails to fail securely, a condition known as failing open, which allows an unauthorized attacker to bypass a security feature over a network. Recommendations At...
PT-2026-70647
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges over a network, enabling them to affect the system. Recommendations At t...
PT-2026-70691
Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is no...