Microsoft Windows: CVE-2026-70137: Windows Remote Access Connection Manager Information Disclosure Vulnerability

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-73027: Windows Setup Files Cleanup Elevation of Privilege Vulnerability

External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

PT-2026-113348

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager affected versions not specified Description An Incorrect Authorization issue allows for arbitrary code execution within the context of the current user. This could enable an attacker to gain elevated access or control...

PT-2026-113505

Name of the Vulnerable Software and Affected Versions Legacy Update versions 1.12.0 through 1.13.1 Description An origin validation error exists in the IsPermitted method of the ActiveX control. When the hosting document's hostname is not on the permitted list, the system fails to set E...

PT-2026-112629

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description Improper access control in Windows NTFS allows an authorized attacker to disclose information locally. Recommendations At the moment, there is no information about a newer version that...

Microsoft Windows: CVE-2026-70093: Windows Rich Text Edit Control Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally...

CVE-2026-102250: Insufficient Verification of Data Authenticity

CWE-345: Insufficient Verification of Data Authenticity vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in control over the device...

CVE-2024-34320: Improper Access Control

ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints...

CVE-2026-110226: Authorization Bypass Through User-Controlled Key

QloApps through 1.7.0 contains a broken access control vulnerability that allows hotel-restricted back-office employees to create room types under unassigned hotels by supplying an arbitrary idhotel. Attackers can enumerate all hotels via the unfiltered room type form selector and post foreign...

CVE-2026-105733: Incorrect Initialization of Resource

Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally...

PT-2026-112246

Name of the Vulnerable Software and Affected Versions Windows Remote Access Connection Manager affected versions not specified Description Improper access control allows an authorized attacker to locally disclose sensitive information, which can affect the system. Recommendations At the moment,...

PT-2026-112736

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description The Windows Common Log File System Driver contains a flaw where functionality from an untrusted control sphere is included, allowing an authorized attacker to...

PT-2026-113391

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods...

PT-2026-113507

CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interactio...

CVE-2026-52394

The DeepSeek V4 model is vulnerable to Incorrect Access Control when processing a crafted input. While specific internal component details or root cause files are not provided in the documents, the vulnerability allows for unauthorized access. Based on the SSVC metrics, the issue is considered au...

Microsoft Windows: CVE-2026-69783: Windows Update Elevation of Privilege Vulnerability

External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70096: Windows Rich Text Edit Control Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83837: Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

PT-2026-112468

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description Improper access control allows an authorized attacker to disclose sensitive information locally and affect the system. Recommendations At the moment, there is no information...

CVE-2026-105443: Improper Access Control

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers sharing an install...