CVE-2026-45599: Use After Free

Use after free in Universal Plug and Play upnp.dll allows an unauthorized attacker to execute code over a network...

CVE-2026-45465: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-42903: NULL Pointer Dereference

Null pointer dereference in Windows Kerberos allows an authorized attacker to deny service over a network...

CVE-2026-45484: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-45602: Acceptance of Extraneous Untrusted Data With Trusted Data

No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network...

CVE-2026-45454: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-45591: Uncontrolled Resource Consumption

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network...

PT-2026-47966

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to elevate privileges over a network, which can subsequently affect the system. Deserialization is the...

PT-2026-47882

Name of the Vulnerable Software and Affected Versions Windows Kerberos affected versions not specified Description A null pointer dereference in Windows Kerberos allows an authorized attacker to cause a denial of service over a network. A null pointer dereference occurs when a program attempts to...

CVE-2026-49843: Improper Authentication

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, modverto's JSON-RPC handler bound the connection to the client-supplied sessid on the fir...

CVE-2026-45639: Out-of-bounds Read

Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network...

CVE-2026-50508: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-48563: Use After Free

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-45453: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-45503: Improper Authorization

Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network...

CVE-2026-45504: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-42985: Use After Free

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-42913: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-44815: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network...

PT-2026-47952

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...