CVE-2026-69559: Origin Validation Error

Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...

CVE-2026-69680: Origin Validation Error

Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-69612: Absolute Path Traversal

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69578: Numeric Truncation Error

Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-69482: Creation of Temporary File in Directory with Insecure Permissions

Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...

CVE-2026-69462: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...

CVE-2026-68894: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...

CVE-2026-69896: Use After Free

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69684: Generation of Error Message Containing Sensitive Information

Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...

CVE-2026-69513: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69436: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows State Repository Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69362: Use After Free

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

ROS-20260908-73-0046

The vulnerability in xorg-x11-drv-nvidia is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260908-73-0045

The vulnerability in nvidia-kmod is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-87059

XenForo before 2.3.13 contains a signature verification logic error in the PayPal REST webhook handler that allows unauthenticated attackers to bypass payment signature validation by submitting a webhook request with an unsupported auth algo header value. When the algorithm cannot be mapped to a...

PT-2026-88285

Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network...

PT-2026-88224

Name of the Vulnerable Software and Affected Versions Android OS affected versions not specified Description A logic error in multiple functions of RemoteViews.java allows a bypass of background activity launch restrictions. This flaw enables local escalation of privilege without requiring...

PT-2026-88244

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A logic error in the serviceClassExists function within InCallController.java allows for arbitrary code execution. This issue can lead to local escalation of privilege without requiring...

PT-2026-88233

In LimitRealloc of malloc limit.cpp, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88337

HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message. The wrappers and renderers that emit a form's errors interpolate the error string straight into HTML with no escaping. Two of the library's own messages, no...