PT-2026-111345

Ghost is a Node.js content management system. From 4.0.0 until 6.67.0, a crafted content import file could cause excessive CPU usage, making the Ghost server unresponsive. Exploiting this requires Administrator access. This issue is fixed in version 6.67.0...

CVE-2026-109944: Reachable Assertion

FreeRDP 3.0.0 before 3.32.0 does not remove card handles when EmulateSCardReleaseContext releases a smartcard-emulation context, so EmulateSCardTransmit later looks up the deleted parent context and reaches a terminating WINPRASSERT. A malicious RDP server can crash a connecting client with...

Microsoft Windows: CVE-2026-85319: Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-70248: Windows Hyper-V Denial of Service Vulnerability

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...

Microsoft Windows: CVE-2026-70163: Microsoft OpenSSH for Windows Denial of Service Vulnerability

Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-83855: Windows WLAN Service Denial of Service Vulnerability

Integer underflow wrap or wraparound in Windows WLAN Service allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-83667: Windows Active Directory Domain Services Denial of Service Vulnerability

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-83648: Windows Active Directory Domain Services Denial of Service Vulnerability

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-88084: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-97830: Double Free

Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...

CVE-2026-96861: Out-of-bounds Read

Out-of-bounds read in Network Device Enrollment Service NDES allows an unauthorized attacker to deny service over a network...

Microsoft SQL Server: CVE-2026-94520: Microsoft SQL Server Denial of Service Vulnerability

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-83667: Out-of-bounds Read

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-83655: Out-of-bounds Read

Out-of-bounds read in Network Policy Server NPS allows an unauthorized attacker to deny service over a network...

CVE-2026-83648: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-83516: Out-of-bounds Read

Out-of-bounds read in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to deny service over a network...

CVE-2026-83795: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network...

CVE-2026-83665: NULL Pointer Dereference

Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

CVE-2026-83647: Out-of-bounds Read

Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

CVE-2026-95124: Buffer Copy without Checking Size of Input

Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundled loadinibuffer utility and stripinicache...