PT-2026-87402

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-87466

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A heap-based buffer overflow occurs in Windows Error Reporting, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

PT-2026-87507

Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally...

PT-2026-87561

Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network...

PT-2026-87614

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-87232

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An authorized attacker can disclose sensitive information over a network due to the generation of error messages that contain sensitive data. Recommendations At the moment, there is no...

PT-2026-88452

HTML::FormHandler versions before 0.410002 for Perl render some error messages into HTML without escaping. The Table form layout and the Bootstrap 2 and 3 wrappers splice each error string straight into the surrounding markup. Version 0.410000, the fix for CVE-2026-19872, escaped the equivalent...

PT-2026-88228

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the getAllSessions function across multiple files creates a confused deputy scenario. This issue allows for local information disclosure without...

PT-2026-88227

Name of the Vulnerable Software and Affected Versions AccountsDb.java affected versions not specified Description A logic error exists in the findMetaAuthUid function within AccountsDb.java, which may allow a Factory Reset Protection FRP bypass. FRP is a security feature that prevents unauthorize...

PT-2026-88141

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-87478

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-87651

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description An origin validation error allows an unauthorized attacker to perform spoofing over a network, which can be used to affect the system. Recommendations At the moment, there is no informati...

PT-2026-88239

In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-87488

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A heap-based buffer overflow occurs in Windows Error Reporting, which allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow is a...

PT-2026-87533

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-58649: Origin Validation Error

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

PT-2026-87341

Name of the Vulnerable Software and Affected Versions Microsoft COM for Windows affected versions not specified Description An issue in Microsoft COM for Windows allows an authorized attacker to locally disclose sensitive information through the generation of error messages. Recommendations At th...

CVE-2026-83996: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69535: Numeric Truncation Error

Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

PT-2026-88220

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the btm sec encrypt change function within btm sec.cc allows for a downgrade attack. This issue enables remote information disclosure without...