PT-2026-87770

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally...

PT-2026-88042

Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally...

PT-2026-87926

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to execute code locally...

PT-2026-87388

Name of the Vulnerable Software and Affected Versions Windows Fast FAT Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Fast FAT Driver. This issue allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially...

CVE-2026-81957: Out-of-bounds Read

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2026-88609

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Updater component on Windows allows a local attacker to execute arbitrary code outside the sandbox via a local program. Recommendations Update Google Chro...

PT-2026-88630

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An uncontrolled search path element in the CredentialProvider allows a local attacker to execute arbitrary code outside the sandbox via a local program on Windows systems. Recommendatio...

PT-2026-88733

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue exists in Views, which allows a local attacker to execute arbitrary code outside the sandbox through UI Interaction. Use after free is a memory corruption flaw th...

CVE-2026-69479: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

CVE-2026-86502

In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...

CVE-2026-86502

In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...

EUVD-2026-72518

In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...

CVE-2026-86502

JetBrains IntelliJ IDEA versions before 2026.2.2 contain a vulnerability in the IJent gRPC server , where missing TLS encryption and authentication allowed an attacker with local access to achieve arbitrary code execution on Remote Development hosts. The CVSS 3.1 score is 8.4 (High) , reflecting ...

PT-2026-86874

In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...

CVE-2026-86502: Missing Authentication for Critical Function

In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote Development hosts...

OESA-2026-3613 popt security update

The popt library exists essentially for parsing command line options. Some specific advantages of popt are no global variables allowing multiple passes in parsing argv, parsing an arbitrary array of argv-style elements allowing parsing of command-line-strings from any source, a standard method of...

OESA-2026-3612 popt security update

The popt library exists essentially for parsing command line options. Some specific advantages of popt are no global variables allowing multiple passes in parsing argv, parsing an arbitrary array of argv-style elements allowing parsing of command-line-strings from any source, a standard method of...

OESA-2026-3611 popt security update

The popt library exists essentially for parsing command line options. Some specific advantages of popt are no global variables allowing multiple passes in parsing argv, parsing an arbitrary array of argv-style elements allowing parsing of command-line-strings from any source, a standard method of...

CVE-2026-81302

CVE-2026-81302 is currently a reserved candidate with no publicly disclosed technical details. The only record is a sighting linked to JVN (Japan Vulnerability Notes). Monitor for updates as the reserving organization publicizes the vulnerability.

CVE-2025-71408

A flaw was found in NLTK Natural Language Toolkit. This eval injection vulnerability in the nltk.collocations module allows a local attacker to execute arbitrary Python code. By manipulating command-line arguments when collocations.py is invoked directly, an attacker can bypass validation and...