EUVD-2026-72979

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

EUVD-2026-73235

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73225

Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73219

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73208

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

EUVD-2026-73200

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network...

Windows DHCP Server Information Disclosure Vulnerability

Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network...

Windows Remote Access Connection Manager Remote Code Execution Vulnerability

Integer underflow wrap or wraparound in Windows Remote Access Connection Manager allows an authorized attacker to execute code over a network...

Microsoft SQL Server Information Disclosure Vulnerability

Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network...

Microsoft Office SharePoint Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

Microsoft Office SharePoint Information Disclosure Vulnerability

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

PT-2026-87746

Name of the Vulnerable Software and Affected Versions Windows Biometric Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Biometric Service. This issue allows an authorized attacker to elevate privileges over a network, potentially affecting th...

PT-2026-87549

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use after free issue in Windows Remote Desktop Services allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Use afte...

PT-2026-87499

Use after free in Windows Overlay Filter allows an authorized attacker to disclose information over a network...

PT-2026-87460

Name of the Vulnerable Software and Affected Versions Windows IKE Extension affected versions not specified Description A heap-based buffer overflow occurs in the Windows IKE Extension, which allows an authorized attacker to execute arbitrary code over a network and affect the system. A heap-base...

PT-2026-87802

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

PT-2026-83259

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description A race condition exists in Copilot Chat, where concurrent execution using a shared resource with improper synchronization allows an authorized attacker to disclose information over a...

EUVD-2023-26043

Malicious code in bioql PyPI...

CVE-2025-49191 Dashboards and iFrames can link malicious web content

Linked URLs during the creation of iFrame widgets and dashboards are vulnerable to code execution. The URLs get embedded as iFrame widgets, making it possible to attack other users that access the dashboard by including malicious code. The attack is only possible if the attacker is authorized to...

CVE-2024-41151

Deserialization of Untrusted Data vulnerability in Apache HertzBeat. This vulnerability can only be exploited by authorized attackers. This issue affects Apache HertzBeat: before 1.6.1. Users are recommended to upgrade to version 1.6.1, which fixes the issue...