Microsoft PC Manager < 3.21.6.0 Elevation of Privilege (CVE-2026-58636) (July 2026)

The Windows 'Microsoft PC Manager' app installed on the remote host is prior to 3.21.6.0. It is, therefore, affected by an elevation of privilege vulnerability: - A local privilege escalation vulnerability allows an authenticated attacker to gain elevated privileges on the system. CVE-2026-58636...

Microsoft PC Manager < 3.22.1.0 Elevation of Privilege (CVE-2026-50438) (July 2026)

The Windows 'Microsoft PC Manager' app installed on the remote host is prior to 3.22.1.0. It is, therefore, affected by an elevation of privilege vulnerability: - A local privilege escalation vulnerability allows an authenticated attacker to escalate privileges beyond the vulnerable component's...

PT-2026-58522

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized attacker...

PT-2026-58550

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read exists in Microsoft Office Excel, which allows an unauthorized attacker to disclose sensitive information locally through the use of malicious content...

PT-2026-58585

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A numeric truncation error occurs in Microsoft Office Word, which could allow an unauthorized attacker to disclose information locally. This issue enables attackers to obtain...

PT-2026-58141

Name of the Vulnerable Software and Affected Versions Microsoft Printer Drivers affected versions not specified Description A use-after-free condition exists in Microsoft Printer Drivers. This issue allows an authorized attacker with local access to elevate their privileges on the system...

PT-2026-58299

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An untrusted pointer dereference allows an unauthorized attacker to perform local information disclosure. This issue occurs when the software accesses a memory address through ...

PT-2026-58564

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs when the software reads data past...

PT-2026-58249

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...

PT-2026-58284

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Enterprise Server 2016 versions prior to 16.0.5556.1005 Microsoft SharePoint Server 2019 versions prior to 16.0.10417.20153 Microsoft SharePoint Server Subscription Edition versions prior to 16.0.19725.20384 Description An...

PT-2026-58558

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read issue exists that allows an unauthorized attacker to disclose information over a network. An out-of-bounds read occurs when the software reads data past t...

Security Update for Microsoft ASP.NET Core (July 2026)

The Microsoft ASP.NET installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate...

PT-2026-58417

Name of the Vulnerable Software and Affected Versions Microsoft PC Manager versions prior to 3.22.1.0 Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally. Recommendations Update to version 3.22.1.0 via...

PT-2026-58485

Name of the Vulnerable Software and Affected Versions Microsoft Defender for Endpoint on Mac versions prior to 101.26042.0020 Description An issue in Microsoft Defender allows an authorized attacker to locally disclose private personal information to an unauthorized actor. Recommendations Update...

KLA91143 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...

PT-2026-58584

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A stack-based buffer overflow exists in Microsoft Office Excel, which could allow an unauthorized attacker to execute code locally. This issue can be triggered when a user open...

PT-2026-58443

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A use after free issue exists in Microsoft Office, which could allow an unauthorized attacker to execute code locally. This occurs when a user opens a specially crafted file locally ...

PT-2026-58567

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description Improper validation of a specified input type allows an unauthorized attacker to disclose information locally. This issue is characterized as an information leak rather than...

PT-2026-58557

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow exists in Microsoft Office Excel, which allows an unauthorized attacker to execute code locally. This issue can be triggered when a user opens a...

PT-2026-58570

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A heap-based buffer overflow exists in Microsoft Office Word, which could allow an unauthorized attacker to execute code locally. This issue can be triggered via the Preview Pan...