CVE-2026-56169: Improper Authentication

Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

CVE-2026-50415: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized attacker to disclose information over a network...

PT-2026-58806

Name of the Vulnerable Software and Affected Versions .NET versions prior to 8.0.29 .NET versions prior to 9.0.18 .NET versions prior to 10.0.10 Description An issue exists where the allocation of resources occurs without limits or throttling, allowing an unauthorized attacker to cause a denial o...

PT-2026-58716

Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold. This issue allows an unauthorized attacker t...

PT-2026-58262

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description Resource allocation without limits or throttling allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the moment, there is no information about...

PT-2026-58682

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description An incorrect implementation of the authentication algorithm allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information abo...

UBUNTU-CVE-2026-50527

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network...

PT-2026-58635

Name of the Vulnerable Software and Affected Versions .NET 8 .NET 9 .NET 10 Description An issue involving type confusion, which occurs when a program uses a resource with a type that is incompatible with the expected type, allows an unauthorized attacker to cause a denial of service over a...

CVE-2026-57108: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in .NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-50527: Stack-based Buffer Overflow

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network...

PT-2026-58696

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An issue exists where the allocation of resources occurs without limits or throttling, which allows an unauthorized attacker to cause a denial-of-service condition over a network. Recommendation...

PT-2026-58714

Name of the Vulnerable Software and Affected Versions .NET versions 8 through 10 .NET Framework affected versions not specified Description An issue exists where resources are allocated without limits or throttling, allowing an unauthenticated attacker to drain system resources over a network and...

CVE-2026-47300: Incorrect Implementation of Authentication Algorithm

Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network...

PYSEC-2026-3437 zeroconf: Unbounded exception-dedup state retains packet buffers via traceback frame locals, enabling LAN-local memory exhaustion

Impact DNSIncoming.logexceptiondebug and the four QuietLogger exception-dedup methods stored an unbounded seenlogs dict keyed by strsys.excinfo1. The seven IncomingDecodeError messages raised from readname / decodelabelsatoffset RFC 6762 §18 name-decoding error paths all embed self.source — the...

PYSEC-2026-3436 zeroconf has unbounded recursion in DNS compression-pointer decoder that allows LAN-local denial of service

Impact DNSIncoming.decodelabelsatoffset recurses once per DNS-name compression pointer RFC 1035 §4.1.4. Pointer cycles and label counts were capped, but the chain length of unique forward pointers was not. A single 3 kB mDNS packet carrying 1500 chained pointers drives the recursion past CPython'...

CVE-2026-51538

EIPStackGroup OpENer 2.3.0 commit 76b95cf suffers from an Incorrect Access Control vulnerability in its handling of encapsulation sessions. When the server processes critical encapsulation commands, it verifies whether the provided sessionhandle exists in the global session list, but it fails to...

CVE-2026-51537

EIPStackGroup OpENer 2.3.0 commit 76b95cf has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets. An attacker can send a valid ENIP outer frame carrying a malformed CIP ForwardOpen/LargeForwardOpen request, causing the parser...

PT-2026-60045

Impact DNSIncoming. decode labels at offset recurses once per DNS-name compression pointer RFC 1035 §4.1.4. Pointer cycles and label counts were capped, but the chain length of unique forward pointers was not. A single 3 kB mDNS packet carrying 1500 chained pointers drives the recursion past...

CVE-2026-58596

Untrusted pointer dereference in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-58596: Untrusted Pointer Dereference

Untrusted pointer dereference in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges over a network...