PT-2026-112179

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Resilient File System ReFS, which allows an authorized attacker to elevate privileges locally. A heap-based buffe...

PT-2026-112736

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description The Windows Common Log File System Driver contains a flaw where functionality from an untrusted control sphere is included, allowing an authorized attacker to...

PT-2026-113151

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

PT-2026-112414

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A use-after-free condition in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges...

PT-2026-112699

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description A time-of-check time-of-use toctou race condition exists in the Windows Projected File System. This flaw allows an authorized attacker to perform local tampering. A TOCT...

PT-2026-113155

Null pointer dereference in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute code locally...

Microsoft Windows: CVE-2026-69783: Windows Update Elevation of Privilege Vulnerability

External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70084: Windows Projected File System Information Disclosure Vulnerability

Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83513: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83835: Windows Common Log File System Driver Information Disclosure Vulnerability

Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-69675: Windows Network File System Information Disclosure Vulnerability

Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70143: Windows Network File System Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally...

UBUNTU-CVE-2026-107818

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE privilege and a secure-file-priv...

CVE-2026-102186: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally...

CVE-2026-103937: Incomplete Cleanup

Misskey is an open source, federated social media platform. From 13.0.0 until 2025.4.1 and from 2025.5.0 until 2026.7.0, cleanup processing may not execute during file uploads. Repeated uploads can exhaust storage or file descriptors and deny service regardless of whether federation is enabled...

PT-2026-111673

Name of the Vulnerable Software and Affected Versions Ivanti Xtraction versions prior to 2026.4 Description An External Control of File Name or Path issue allows a remote authenticated attacker to redirect application-generated requests to an endpoint under their control. This can lead to the the...

CVE-2026-102218: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-104348: Heap-based Buffer Overflow

Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-111617

Name of the Vulnerable Software and Affected Versions SFTPGo versions 2.5.0 through 2.7.5 Description An authenticated user with copy permissions can bypass file-pattern filters to copy source files that are restricted by denied patterns or located outside of allowed patterns to an allowed...

UBUNTU-CVE-2026-107814

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account with the database data directory as its home directory. A database user with the FILE privilege...