CVE-2026-62804: External Control of File Name or Path

External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2026-58599: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally...

PT-2026-87263

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

PT-2026-87292

Buffer over-read in Windows NTFS allows an authorized attacker to execute code locally...

PT-2026-88088

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2026-87770

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally...

PT-2026-87457

Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally...

PT-2026-87504

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

CVE-2026-81386: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-81397: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-81389: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

CVE-2026-68787: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

PT-2026-88733

Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

PT-2026-88630

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

PT-2026-88609

Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

PT-2026-87550

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally...

PT-2026-87605

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...

CVE-2026-81355: Heap-based Buffer Overflow

Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to execute code locally...

CVE-2026-77891: Out-of-bounds Read

Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally...

CVE-2026-70585: Use After Free

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally...