CVE-2026-28660: Protection Mechanism Failure

In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58649: Origin Validation Error

Origin validation error in .NET allows an unauthorized attacker to disclose information over a network...

PT-2026-87655

Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...

PT-2026-87488

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A heap-based buffer overflow occurs in Windows Error Reporting, which allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow is a...

CVE-2026-69896: Use After Free

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-87478

Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-68894: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...

Security update for bzip2 (low)

openSUSE security update: security update for bzip2 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21762-1 Rating: low References: bsc1266786 Cross-References: CVE-2026-42250 CVSS scores: CVE-2026-42250 SUSE : 3.3...

CVE-2026-69433: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69680: Origin Validation Error

Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network...

PT-2026-88231

In WriteImageToDisk of runtime image.cc, there is a possible file tampering due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28606: Improper Authentication

In handleBondStateChanged of AdapterService.java, there is a possible way to skip pairing due to a logic error in the code. This could lead to remote escalation of privilege without user consent with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-87059

XenForo before 2.3.13 contains a signature verification logic error in the PayPal REST webhook handler that allows unauthenticated attackers to bypass payment signature validation by submitting a webhook request with an unsupported auth algo header value. When the algorithm cannot be mapped to a...

PT-2026-88228

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A logic error in the getAllSessions function across multiple files creates a confused deputy scenario. This issue allows for local information disclosure without...

PT-2026-88285

Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network...

CVE-2026-28584: Protection Mechanism Failure

In createSessionInternal of PackageInstallerService.java, there is a possible way to permanently DoS the device due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-87561

Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network...

CVE-2026-69362: Use After Free

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-87308

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A heap-based buffer overflow occurs in Windows Error Reporting, which allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow is a...

CVE-2026-69684: Generation of Error Message Containing Sensitive Information

Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...