CVE-2026-73018: Heap-based Buffer Overflow

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...

PT-2026-87645

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-87272

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network. A stack-based buffer overflow occurs when a program writes more data to ...

CVE-2026-78526: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

PT-2026-87553

Name of the Vulnerable Software and Affected Versions Virtual Hard Disk VHD Miniport Driver affected versions not specified Description A heap-based buffer overflow occurs in the Virtual Hard Disk VHD Miniport Driver. This issue allows an authorized attacker to elevate privileges locally,...

CVE-2026-71328

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

CVE-2026-69603: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...

CVE-2026-75690: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

CVE-2026-73011: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69340: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-74239: Improper Limitation of a Pathname to a Restricted Directory

XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated non-super administrators with style permissions to write arbitrary files outside the intended extraction directory by using backslash-based traversal...

PT-2026-87748

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...

PT-2026-88405

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

PT-2026-88379

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

PT-2026-87922

Name of the Vulnerable Software and Affected Versions Windows Imaging Component affected versions not specified Description A heap-based buffer overflow occurs in the Windows Imaging Component, which is a framework that allows developers to integrate imaging functionality into their applications...

PT-2026-87703

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

PT-2026-88394

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

PT-2026-88390

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

PT-2026-87990

Name of the Vulnerable Software and Affected Versions Windows Distributed File System DFS affected versions not specified Description A use-after-free condition in the Windows Distributed File System DFS allows an authorized attacker to cause a denial of service over a network. Use-after-free is ...

PT-2026-88367

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...