Microsoft Windows: CVE-2026-83683: Windows Encrypting File System (EFS) Information Disclosure Vulnerability

Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to disclose information over a network...

PT-2026-111926

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

PT-2026-112442

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS Deduplication Service affected versions not specified Description Weak authentication in the Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locall...

PT-2026-111673

Name of the Vulnerable Software and Affected Versions Ivanti Xtraction versions prior to 2026.4 Description An External Control of File Name or Path issue allows a remote authenticated attacker to redirect application-generated requests to an endpoint under their control. This can lead to the the...

PT-2026-112873

VNote is a note-taking platform. Prior to 4.3.0, VNote uses the assignment preNode.innerHTML = p metaData in src/data/extra/web/js/markdownit.js to insert YAML frontmatter metadata into a pre element before the protectFromXss sanitization path runs. Opening an attacker-supplied Markdown note can...

PT-2026-112719

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description Weak authentication in the Windows Projected File System allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no...

PT-2026-113286

Dimension is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-113296

Dimension is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in that a...

Microsoft Windows: CVE-2026-69675: Windows Network File System Information Disclosure Vulnerability

Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally...

PT-2026-112699

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description A time-of-check time-of-use toctou race condition exists in the Windows Projected File System. This flaw allows an authorized attacker to perform local tampering. A TOCT...

PT-2026-113306

Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in arbitrary file system write. A low-privileged attacker could leverage this vulnerability to write files to unauthorized locations on the file...

PT-2026-111997

Name of the Vulnerable Software and Affected Versions Windows Distributed File System DFS affected versions not specified Description An untrusted pointer dereference in Windows Distributed File System DFS allows an unauthorized attacker to elevate privileges over a network. Recommendations At th...

PT-2026-112414

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A use-after-free condition in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges...

PT-2026-112847

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description An out-of-bounds read in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose sensitive informatio...

Microsoft Windows: CVE-2026-83759: Windows Encrypting File System (EFS) Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Windows Encrypting File System EFS allows an authorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-88162: Windows Encrypting File System (EFS) Tampering Vulnerability

Improper authorization in Windows Encrypting File System EFS allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-70116: Windows Resilient File System (ReFS) Security Feature Bypass Vulnerability

Stack-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to bypass a security feature with a physical attack...

Microsoft Windows: CVE-2026-85791: Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96857: Windows Projected File System Information Disclosure Vulnerability

Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70277: Windows Fast FAT File System Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Fast FAT Driver allows an unauthorized attacker to disclose information locally...