PT-2026-58195

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is...

PT-2026-58334

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Improper authorization in the RPC Runtime allows an authorized attacker to elevate privileges locally. This issue specifically involves the Netlogon RPC, which can be leveraged to escalate a...

PT-2026-58501

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description An issue in Windows Cryptographic Services allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Recommendations At the...

PT-2026-58850

Name of the Vulnerable Software and Affected Versions mastergo-design mastergo-magic-mcp versions prior to 0.2.1 Description Path traversal occurs in the execute function within the mastergo/component-workflow.md file of the mcp getComponentGenerator component. This issue arises from the improper...

PT-2026-58647

Name of the Vulnerable Software and Affected Versions Microsoft Input Method Editor IME affected versions not specified Description A heap-based buffer overflow occurs in the Microsoft Input Method Editor IME, which is a system component that allows users to input characters for languages that do...

PT-2026-58114

Name of the Vulnerable Software and Affected Versions Windows File Explorer affected versions not specified Description An authorized attacker can locally disclose sensitive information due to an exposure of sensitive information to an unauthorized actor within Windows File Explorer...

PT-2026-58375

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows Server 2025 affected versions not specified Description A use after free flaw in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally, enabling a user with...

PT-2026-58266

Name of the Vulnerable Software and Affected Versions Windows Admin Center affected versions not specified Description Improper authentication allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that contains a...

PT-2026-58156

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute arbitrary code locally and remotely, potentially affecting the entire system. A heap-based buffer...

PT-2026-58357

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A heap-based buffer overflow exists in Windows DirectX. This issue allows an authorized attacker to elevate privileges locally, potentially granting full control over the system. A...

PT-2026-58200

Name of the Vulnerable Software and Affected Versions Windows Audio Compression Manager affected versions not specified Description Improper access control in the Windows Audio Compression Manager ACM allows an authorized attacker to elevate privileges locally. Recommendations Install update...

PT-2026-58168

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description A heap-based buffer overflow exists in Windows GDI+, which allows an unauthorized attacker to execute code locally. This issue can lead to remote code execution RCE on PCs and servers wh...

PT-2026-58655

Name of the Vulnerable Software and Affected Versions Windows Media affected versions not specified Description A heap-based buffer overflow occurs in Windows Media, which is a memory corruption issue where data exceeds the allocated buffer on the heap. This allows an unauthorized attacker to...

PT-2026-58171

Name of the Vulnerable Software and Affected Versions Windows Local Security Authority Subsystem Service LSASS affected versions not specified Description Uncontrolled resource consumption in the Local Security Authority Subsystem Service LSASS allows an authorized attacker to cause a denial of...

PT-2026-58522

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized attacker...

PT-2026-58610

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to locally disclose sensitive information, which can affect the system. Recommendations At the moment, there is no information...

PT-2026-58534

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow exists in Microsoft Office Excel, which could allow an unauthorized attacker to execute arbitrary code locally. A heap-based buffer overflow occurs...

PT-2026-58097

Письмо, которое ходит за вас: разбираю свежий SSRF в Roundcube на живом стенде habr https://habr.com/ru/articles/1061638/ Tags: Roundcube, SSRF, CVE-2026-62643, вебмейл, sslip.io, XSS, почтовый сервер Author: CynepMyx...

PT-2026-58239

Name of the Vulnerable Software and Affected Versions Microsoft Windows Media Foundation affected versions not specified Description A heap-based buffer overflow exists in Microsoft Windows Media Foundation. This issue allows an unauthorized attacker to execute code locally or achieve remote code...

PT-2026-58563

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthoriz...