CVE-2026-58617: Improper Access Control

Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50460: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...

PT-2026-58717

Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description An issue exists where resources are allocated without limits or throttling, allowing an unauthorized attacker to cause a denial of service over a network. Recommendations At the moment...

CVE-2026-50432: Use After Free

Use after free in Windows Virtual Filtering Platform VFP allows an authorized attacker to deny service over a network...

CVE-2026-50429: Out-of-bounds Read

Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network...

PT-2026-58236

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows Server 2025 affected versions not specified Description A heap-based buffer overflow in the Remote Desktop Client allows an unauthorized and unauthenticated attacker to execute arbitrary code...

PT-2026-58696

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An issue exists where the allocation of resources occurs without limits or throttling, which allows an unauthorized attacker to cause a denial-of-service condition over a network. Recommendation...

PT-2026-58682

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description An incorrect implementation of the authentication algorithm allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information abo...

CVE-2026-54121: Improper Authorization

Improper authorization in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges over a network...

CVE-2026-40378: Memory Allocation with Excessive Size Value

Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to deny service over a network...

CVE-2026-58535: Use of Uninitialized Resource

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network...

PT-2026-58123

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Bluetooth Port Driver. This issue allows an unauthorized attacker located on an adjacent network to execute arbitrary code and...

CVE-2026-50328: Uncaught Exception

Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network...

PT-2026-58206

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

PT-2026-58362

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description A heap-based buffer overflow occurs in Windows GDI+, which is a graphics API used for rendering images and shapes. This flaw allows an unauthorized remote attacker to execute arbitrary...

PT-2026-58644

Name of the Vulnerable Software and Affected Versions Windows SMB affected versions not specified Description A race condition occurs in Windows SMB when shared resources are executed concurrently with improper synchronization. This allows an authorized attacker to elevate privileges over a...

CVE-2026-55008: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-50379: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Media allows an authorized attacker to elevate privileges over a network...

CVE-2026-57976: NULL Pointer Dereference

Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...

CVE-2026-55020: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...