PT-2026-58655

Name of the Vulnerable Software and Affected Versions Windows Media affected versions not specified Description A heap-based buffer overflow occurs in Windows Media, which is a memory corruption issue where data exceeds the allocated buffer on the heap. This allows an unauthorized attacker to...

PT-2026-58322

Name of the Vulnerable Software and Affected Versions Windows Application Model affected versions not specified Description A use after free issue in the Windows Application Model allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs...

PT-2026-58150

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A heap-based buffer overflow exists in the Windows DNS Client. This flaw allows an authorized attacker with local access to elevate their privileges to administrative levels. A heap-based...

PT-2026-58167

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use after free flaw in the Windows Kernel allows an authorized attacker to bypass security boundaries and elevate privileges locally. Use after free is a memory corruption issue that...

Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally...

PT-2026-58522

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized attacker...

PT-2026-58850

Name of the Vulnerable Software and Affected Versions mastergo-design mastergo-magic-mcp versions prior to 0.2.1 Description Path traversal occurs in the execute function within the mastergo/component-workflow.md file of the mcp getComponentGenerator component. This issue arises from the improper...

PT-2026-58171

Name of the Vulnerable Software and Affected Versions Windows Local Security Authority Subsystem Service LSASS affected versions not specified Description Uncontrolled resource consumption in the Local Security Authority Subsystem Service LSASS allows an authorized attacker to cause a denial of...

PT-2026-58643

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Resilient File System ReFS, which is a file system designed for high availability and scalability. This flaw allo...

PT-2026-58097

Письмо, которое ходит за вас: разбираю свежий SSRF в Roundcube на живом стенде habr https://habr.com/ru/articles/1061638/ Tags: Roundcube, SSRF, CVE-2026-62643, вебмейл, sslip.io, XSS, почтовый сервер Author: CynepMyx...

PT-2026-58115

Name of the Vulnerable Software and Affected Versions Windows Audio Service affected versions not specified Description An issue in the Windows Audio Service allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Recommendations At the moment, there is n...

PT-2026-58380

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description An out-of-bounds read in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally. An out-of-bounds read occurs...

PT-2026-58155

Name of the Vulnerable Software and Affected Versions Windows Clipboard Server affected versions not specified Description A race condition occurs in the Windows Clipboard Server due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges...

PT-2026-60103

Name of the Vulnerable Software and Affected Versions Anyquery affected versions not specified Description When operated in server mode, the software lacks input sanitization and access control for its built-in SQLite virtual table modules, such as csv reader and log reader. Unauthenticated...

PT-2026-58175

Name of the Vulnerable Software and Affected Versions Windows AppX Deployment Service affected versions not specified Description A race condition exists in the Windows AppX Deployment Service. This occurs when concurrent execution using a shared resource lacks proper synchronization, allowing an...

PT-2026-58560

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized attacker...

PT-2026-58158

Name of the Vulnerable Software and Affected Versions Microsoft Windows App Store affected versions not specified Description A race condition occurs when multiple processes access a shared resource concurrently without proper synchronization. In the Microsoft Windows App Store, this flaw allows ...

PT-2026-58192

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue in the Windows Kernel allows an authorized attacker to disclose sensitive information locally by inserting it into a log file. Recommendations At the moment, there is no...

CVE-2026-58487

HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, due to unsafe handling of the local-part of registered email addresses, HedgeDoc was vulnerable to stored HTML Injection through its publish and slide views. An attacker could register a...

CVE-2026-15684

Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Glarysoft Glary Utilities. An attacker must first obtain the ability to execute low-privileged code on the target system...