CVE-2026-66770: Improper Neutralization of Special Elements used in an SQL Command

Due to an SQL Injection vulnerability in SAP Social intelligence, an authenticated attacker could directly inject an SQL DDL Data Definition Language string into the underlying database without further authorization. Successful exploitation could allow the attacker to make malicious changes to th...

PT-2026-70302

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. Unprivileged software adversary with an unauthenticated user combined with a high complexity attack may enable denial of service. This result may potentially occur via...

PT-2026-70394

Name of the Vulnerable Software and Affected Versions Azure Storage Explorer affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting XSS, a condition where malicious scripts are injected into trusted websites. This allo...

PT-2026-70120

An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to write to any contact record via the updatecontacttour Parse cloud function. The function performs no authentication or authorization before updating the target...

PT-2026-70488

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A use-after-free condition in the Windows Telephony Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

PT-2026-70582

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An out-of-bounds read in Windows NTFS allows an authorized attacker to disclose sensitive information locally, which can affect the system. Recommendations At the moment, there is no...

PT-2026-70569

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read exists in Microsoft Office, which could allow an unauthorized attacker to disclose information locally. An out-of-bounds read occurs when the software reads dat...

CVE-2026-62871

Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...

PT-2026-70717

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description Use of an uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally. This issue can enable attackers to obtain sensitive...

PT-2026-70414

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description Weak authentication in the Microsoft Windows Search Component allows an authorized attacker to disclose sensitive information locally, which can affect the system...

PT-2026-70416

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description The use of an uninitialized resource in the Windows Event Logging Service allows an authorized attacker to disclose information locally. Recommendations At the moment,...

PT-2026-70749

Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

PT-2026-70752

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...

PT-2026-70643

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

PT-2026-70494

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description An out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. An out-of-bounds read occurs when the software reads data past the end of the...

PT-2026-70472

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description The use of an uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally. Recommendations At the moment, there is no information about a newer...

PT-2026-70533

Name of the Vulnerable Software and Affected Versions RPC Runtime affected versions not specified Description A heap-based buffer overflow in the RPC Runtime allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs...

PT-2026-70557

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description An out-of-bounds write in Windows DNS allows an unauthorized attacker to execute arbitrary code over an adjacent network, which can affect the system. Recommendations At the moment, there...

CVE-2026-16974: Improper Neutralization of Input During Web Page Generation

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the postmeta Shortcode in all versions up to, and including, 6.2.0 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2026-11814: Improper Certificate Validation

A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic attacker-in-the-middle to compromise the confidentiality and integrity of the affected device. This issue is limited to certain...