EUVD-2026-98184

SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by an internal protocol component. An unauthenticated attacker could send a malicious request that triggers a memory-handling error, causing the affected process to crash. Successful...

Microsoft Windows: CVE-2026-69354: Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69363: Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-83747: Windows Error Reporting Information Disclosure Vulnerability

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85354: Windows Error Reporting Elevation of Privilege Vulnerability

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83669: Windows Error Reporting Elevation of Privilege Vulnerability

Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70103: Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-111159

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 12.0 through 19.2.7 GitLab CE/EE versions 19.3 through 19.3.4 GitLab CE/EE versions 19.4 through 19.4.1 Description An issue exists where sensitive request data is inserted into log files and error tracking events. This...

Microsoft Windows: CVE-2026-83750: Windows Error Reporting Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-111128

Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified SAP Web Dispatcher affected versions not specified Description An internal protocol component fails to properly validate certain fields in specially crafted requests. An unauthenticated attacker ca...

Microsoft Windows: CVE-2026-83643: Windows Error Reporting Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...

PT-2026-111392

Name of the Vulnerable Software and Affected Versions .NET Client Library for SIMATIC S7 Webserver API versions prior to V3.3.62 Description Applications using the library do not properly redact PLC restore passwords from HTTP error exception messages. An attacker with access to logs or diagnosti...

Microsoft Windows: CVE-2026-83715: Windows Error Reporting Tampering Vulnerability

Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally...

PT-2026-112468

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description Improper access control allows an authorized attacker to disclose sensitive information locally and affect the system. Recommendations At the moment, there is no information...

Microsoft Windows: CVE-2026-83826: Windows Error Reporting Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

ROS-20261013-73-0442

The vulnerability in the kernel-lt is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Windows: CVE-2026-70177: Microsoft Windows Search Component Elevation of Privilege Vulnerability

Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

PT-2026-113244

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A heap-based buffer overflow occurs in Windows Error Reporting, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. A...

Microsoft Windows: CVE-2026-83916: Windows Error Reporting Remote Code Execution Vulnerability

Double free in Windows Error Reporting allows an authorized attacker to execute code locally...

PT-2026-113505

Name of the Vulnerable Software and Affected Versions Legacy Update versions 1.12.0 through 1.13.1 Description An origin validation error exists in the IsPermitted method of the ActiveX control. When the hosting document's hostname is not on the permitted list, the system fails to set E...