CVE-2026-69579: Use After Free

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...

PT-2026-88337

HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message. The wrappers and renderers that emit a form's errors interpolate the error string straight into HTML with no escaping. Two of the library's own messages, no...

PT-2026-87140

An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below...

EUVD-2026-72911

An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...

PT-2026-88142

A new vulnerability with increased severity was disclosed for Microsoft Windows CVE-2026-83997 https://t.co/Di6uxnlzNX...

CVE-2026-79574

An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...

CVE-2026-69303: Out-of-bounds Read

Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...

CVE-2026-86510: Out-of-bounds Write

A vulnerability has been found in D-Link DIR-822A A101. Affected is the function tunnelsetparams of the component L2TP Control Message Parser. Such manipulation leads to out-of-bounds write. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

PT-2026-87112

An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...

PT-2026-87561

Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network...

PT-2026-87655

Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...

PT-2026-87582

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...

CVE-2026-79574

An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...

PT-2026-87850

Name of the Vulnerable Software and Affected Versions Windows Message Queuing Queue Manager affected versions not specified Description A buffer over-read in the Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose sensitive information over a network. Recommendations...

CVE-2026-72932: Buffer Over-read

Buffer over-read in Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose information over a network...

PT-2026-87033

The Zephyr Project Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 3.3.205 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Custom-level...

CVE-2026-83997: Use After Free

Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...

CVE-2026-69645: Use After Free

Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally...

PT-2026-87301

Name of the Vulnerable Software and Affected Versions Windows Message Queuing Queue Manager affected versions not specified Description An out-of-bounds read occurs in the Windows Message Queuing Queue Manager, which allows an unauthorized attacker to cause a denial of service over a network. An...

PT-2026-87341

Name of the Vulnerable Software and Affected Versions Microsoft COM for Windows affected versions not specified Description An issue in Microsoft COM for Windows allows an authorized attacker to locally disclose sensitive information through the generation of error messages. Recommendations At th...