PT-2026-42025

Name of the Vulnerable Software and Affected Versions Windows 11 versions 24H2 and later Windows Server versions 2022 through 2025 Description YellowKey is a security feature bypass affecting the BitLocker component. An attacker with physical access to a device can bypass full-disk encryption to...

PT-2026-40093

Name of the Vulnerable Software and Affected Versions IntelR Data Center Graphics Driver for VMware ESXi versions prior to 2.0.2 Description A buffer overflow in the Ring 1: Device Drivers may allow a privileged local attacker to escalate privileges and execute arbitrary code. This issue can be...

PT-2026-40237

Name of the Vulnerable Software and Affected Versions Microsoft Windows DNS Client affected versions not specified Description A heap-based buffer overflow exists in the Microsoft Windows DNS Client, specifically within the dnsapi.dll component. This issue occurs during the processing of DNS...

PT-2026-40440

Name of the Vulnerable Software and Affected Versions cPanel & WHM affected versions not specified Description Improper sanitization of the status query parameter in the '/unprotected/nova error' endpoint allows an unauthenticated attacker to inject arbitrary HTTP headers into the response...

PT-2026-40334

Name of the Vulnerable Software and Affected Versions Exim versions 4.97 through 4.99.2 Description Exim contains a use-after-free memory corruption issue in the BDAT body parsing path, specifically affecting builds compiled with GnuTLS. The issue occurs during a CHUNKING transfer when a client...

PT-2026-40434

Name of the Vulnerable Software and Affected Versions Wing FTP Server version 8.1.2 Description An authenticated remote code execution issue exists in the session serialization mechanism. Authenticated administrators can inject arbitrary Lua code through the domain admin mydirectory field. This...

PT-2026-40319

Name of the Vulnerable Software and Affected Versions WHMCS versions 7.4 through 8.13.2 WHMCS versions 9.0 through 9.0.3 Description Insufficient ownership checks in the 'clientarea.php' endpoint allow an authenticated client area user to submit requests using another user's addonId without...

PT-2026-40545

Name of the Vulnerable Software and Affected Versions SillyTavern versions prior to 1.18.0 Description An authentication bypass and account takeover issue exists when Authelia or Authentik SSO is enabled. The software accepts Remote-User for Authelia and X-Authentik-Username for Authentik HTTP...

PT-2026-40534

Name of the Vulnerable Software and Affected Versions protobufjs versions prior to 7.5.6 protobufjs versions prior to 8.0.2 Description protobufjs includes a minimal UTF-8 decoder used in non-Node and fallback decoding paths that accepts overlong UTF-8 byte sequences—sequences that use more bytes...

PT-2026-40524

A heap-based buffer overflow in the ionic cloud driver for VMware ESXi could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

PT-2026-40204

Name of the Vulnerable Software and Affected Versions Windows 11 versions 24H2 through 25H2 Description A heap-based buffer overflow and untrusted pointer dereference in the Windows Kernel ntoskrnl.exe allows an authorized attacker to elevate privileges locally to SYSTEM level. The issue exists...

PT-2026-40537

Name of the Vulnerable Software and Affected Versions protobufjs versions prior to 7.5.6 protobufjs versions prior to 8.0.2 Description protobufjs uses plain objects with inherited prototypes for internal type lookup tables within generated encode and decode functions. If Object.prototype is...

Local Path Provisioner Vulnerable to HelperPod Template Injection

Impact A malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by rancher/local-path-provisioner. The helperPod.yaml template is loaded by the provisioner and used to create HelperPods during PVC...

GHSA-7FXV-8WR2-MFC4 Local Path Provisioner Vulnerable to HelperPod Template Injection

Impact A malicious user with permission to edit the local-path-config ConfigMap in the local-path-storage namespace can manipulate the helperPod.yaml template used by rancher/local-path-provisioner. The helperPod.yaml template is loaded by the provisioner and used to create HelperPods during PVC...

vlc:vlc-demux-dec-libfuzzer-avi: Crash in dav1d_put_8tap_scaled_16bpc_avx2.vloop

Detailed Report: https://oss-fuzz.com/testcase?key=6551838609702912 Project: vlc Fuzzing Engine: afl Fuzz Target: vlc-demux-dec-libfuzzer-avi Job Type: aflasanvlc Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x78d0d8960000 Crash State: dav1dput8tapscaled16bpcavx2.vloop...

open62541:fuzz_mdns_message: Global-buffer-overflow in _rrparse

Detailed Report: https://oss-fuzz.com/testcase?key=6381930617831424 Project: open62541 Fuzzing Engine: afl Fuzz Target: fuzzmdnsmessage Job Type: aflasanopen62541 Platform Id: linux Crash Type: Global-buffer-overflow READ 1 Crash Address: 0x593b174336df Crash State: rrparse messageparse...

openbabel:fuzz_convert: Crash in OpenBabel::card_found

Project: https://github.com/openbabel/openbabel.git Detailed Report: https://oss-fuzz.com/testcase?key=6088533239726080 Project: openbabel Fuzzing Engine: afl Fuzz Target: fuzzconvert Job Type: aflasanopenbabel Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x789dba4e0020 Crash State:...

matio:matio_readdataall_fuzzer: Heap-buffer-overflow in H5D__scatter_mem

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5248828050833408 Project: matio Fuzzing Engine: honggfuzz Fuzz Target: matioreaddataallfuzzer Job Type: honggfuzzasanmatio Platform Id: linux Crash Type:...

libcoap:persist_fuzzer: Heap-buffer-overflow in coap_persist_startup_lkd

Project: https://github.com/obgm/libcoap.git Detailed Report: https://oss-fuzz.com/testcase?key=4539131949809664 Project: libcoap Fuzzing Engine: honggfuzz Fuzz Target: persistfuzzer Job Type: honggfuzzasanlibcoap Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

md4c:fuzz-mdhtml: Heap-buffer-overflow in md_parse

Project: https://github.com/mity/md4c.git Detailed Report: https://oss-fuzz.com/testcase?key=5721386122543104 Project: md4c Fuzzing Engine: afl Fuzz Target: fuzz-mdhtml Job Type: aflasanmd4c Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7a273cde0028 Crash State:...