PT-2026-87490

Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

PT-2026-87223

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-87997

Integer underflow wrap or wraparound in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network...

PT-2026-87977

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A null pointer dereference occurs in Microsoft Office Word, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. A null...

PT-2026-87295

Name of the Vulnerable Software and Affected Versions Windows Fast FAT Driver affected versions not specified Description A stack-based buffer overflow occurs in the Windows Fast FAT Driver. This issue allows an authorized attacker to elevate privileges over a network. A stack-based buffer overfl...

PT-2026-87234

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A use after free issue exists that allows an authorized attacker to execute arbitrary code over a network, potentially affecting the system. Use after free is a memory corruption flaw that...

PT-2026-87468

Name of the Vulnerable Software and Affected Versions Microsoft.DiaSymReader.Native versions 17.10.0-beta1.24272.1 through 18.9.0-beta1.26405.1 Description A heap-based buffer overflow exists in .NET and Visual Studio, specifically within Microsoft.DiaSymReader.Native. This issue occurs due to an...

PT-2026-87704

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description A use-after-free issue in Microsoft Office PowerPoint allows an unauthorized remote attacker to execute arbitrary code over a network. Use-after-free is a memory corruptio...

PT-2026-87312

Name of the Vulnerable Software and Affected Versions Windows iSCSI affected versions not specified Description An out-of-bounds read occurs in Windows iSCSI, which allows an unauthorized attacker to cause a denial-of-service condition over a network. An out-of-bounds read is a type of memory...

PT-2026-87666

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network...

PT-2026-87273

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...

PT-2026-87433

Name of the Vulnerable Software and Affected Versions Windows NDIS affected versions not specified Description A use-after-free issue in Windows NDIS allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory corruption flaw that occurs when an application...

CVE-2026-81385: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...

CVE-2026-77494: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

CVE-2026-77483: Weak Authentication

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-78462: Authorization Bypass Through User-Controlled Key

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-78444: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...

CVE-2026-77911: Out-of-bounds Read

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

CVE-2026-77895: Out-of-bounds Read

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

CVE-2026-77499: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows DHCP Server allows an unauthorized attacker to deny service over a network...