ROS-20261013-73-0423

The vulnerability in the kernel-lt is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

PT-2026-111316

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8...

PT-2026-113507

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An Improper Access Control issue exists that could lead to a security feature bypass. This allows an attacker to circumvent security measures and obtain unauthorized write...

PT-2026-111690

Missing Authorization vulnerability in Arraytics WP Event Solution wp-event-solution allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Event Solution: from n/a through 4.1.25...

PT-2026-113051

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...

ROS-20261013-73-0323

The vulnerability in the kernel-lt is related to insufficient control of resources during its existence. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-112215

CVE advisory: CVE-2026-70096 - microsoft: Windows Rich Text Edit Control Remote Code Execution Vulnerability. https://t.co/Ro2glX2Y3B CVE CyberSecurity Microsoft WindowsServer...

Microsoft Windows: CVE-2026-70137: Windows Remote Access Connection Manager Information Disclosure Vulnerability

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70096: Windows Rich Text Edit Control Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network...

PT-2026-113081

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description Improper access control in the Routing and Remote Access Service RRAS allows an authorized attacker to perform local tampering, which can affect the...

Microsoft Exchange: CVE-2026-87695: Microsoft Exchange Server Elevation of Privilege Vulnerability

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

PT-2026-111553

EspoCRM 4.0.0 before 10.0.7 contains an improper access control vulnerability that allows authenticated users to read restricted emailAddress values via the address-book search API. Users with record access can query address-book search to obtain email addresses even when Roles restrict the...

CVE-2026-105443: Improper Access Control

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing an install...

CVE-2026-108174: Missing Authorization

Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FOX: from n/a through 1.5.4...

Microsoft Windows: CVE-2026-83837: Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

PT-2026-112902

Name of the Vulnerable Software and Affected Versions Windows Host Guardian Service affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no information about a newer...

CVE-2026-96237: Inclusion of Functionality from Untrusted Control Sphere

Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to execute code over a network...

ROS-20261013-73-0344

The vulnerability in the kernel-lt is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-111945

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version th...

Microsoft Windows: CVE-2026-96218: Windows Update Stack Tampering Vulnerability

Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally...