PT-2026-112362

Name of the Vulnerable Software and Affected Versions Windows CD-ROM Driver affected versions not specified Description An untrusted pointer dereference in the Windows CD-ROM File System Driver allows an unauthorized attacker to execute arbitrary code remotely over a network. Recommendations At t...

PT-2026-111174

Name of the Vulnerable Software and Affected Versions GitLab EE versions 18.1 through 19.2.7 GitLab EE versions 19.3 through 19.3.4 GitLab EE versions 19.4 through 19.4.1 Description An issue exists where an authenticated user can execute arbitrary CI/CD pipelines in a transferred project using t...

Microsoft Windows: CVE-2026-85377: Windows CD-ROM Driver Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-81839: Incorrect Authorization

GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary CI/CD pipelines in a transferred project with the new group's...

CVE-2026-16301: Incorrect Authorization

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with Developer role to execute CI/CD pipelines on protected branches without...

CVE-2026-9268: Incorrect Authorization

GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user with limited permissions to modify project CI/CD deployment rollback settings without...

CVE-2026-83888: Buffer Over-read

Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-77459: Incorrect Authorization

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Argo CD creates PostDelete resource hooks without applying the AppProject destination and resource authorization checks used during ordinary synchronization. The omitt...

PT-2026-112651

Name of the Vulnerable Software and Affected Versions Windows CD-ROM Driver affected versions not specified Description A buffer over-read in the Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network. A buffer over-read occurs when a program reads more data fr...

PT-2026-111169

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.7 through 19.2.7 GitLab CE/EE versions 19.3 through 19.3.4 GitLab CE/EE versions 19.4 through 19.4.1 Description An improper authorization check in the downstream pipeline creation service allows an authenticated user...

PT-2026-112757

Name of the Vulnerable Software and Affected Versions Windows CD-ROM Driver affected versions not specified Description A type confusion issue occurs in the Windows CD-ROM Driver when a resource is accessed using an incompatible type. This allows an authorized attacker to elevate privileges local...

CVE-2026-70275: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-14814: Permissive Regular Expression

GitLab has remediated an issue in GitLab CE/EE affecting all versions before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed a user to poison cached responses for raw repository files, causing targeted users' CI/CD pipelines to execute special...

Microsoft Windows: CVE-2026-83888: Windows CD-ROM Driver Elevation of Privilege Vulnerability

Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network...

PT-2026-111167

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions prior to 19.2.8 GitLab CE/EE versions 19.3 through 19.3.4 GitLab CE/EE versions 19.4 through 19.4.1 Description Improper validation of repository references allows a user to poison cached responses for raw repository file...

PT-2026-111179

Name of the Vulnerable Software and Affected Versions GitLab EE versions 13.6 through 19.2.7 GitLab EE versions 19.3 through 19.3.4 GitLab EE versions 19.4 through 19.4.1 Description Insufficient access control checks allow an authenticated user with limited permissions to modify project CI/CD...

Microsoft Windows: CVE-2026-70041: Windows CD-ROM Driver Information Disclosure Vulnerability

Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally...

CVE-2026-70041: Buffer Over-read

Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally...

GitLab 18.1 < 19.2.8 / 19.3 < 19.3.5 / 19.4 < 19.4.2 (CVE-2026-81839)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - GitLab has remediated an issue in GitLab EE affecting all versions from 18.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticat...

PT-2026-112176

Name of the Vulnerable Software and Affected Versions Windows CD-ROM Driver affected versions not specified Description A buffer over-read in the Windows CD-ROM Driver allows an authorized attacker to disclose sensitive information locally, which may affect the system. Recommendations At the...