PT-2026-88011

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A use after free condition exists in Microsoft Office Word. This flaw allows an unauthorized attacker to execute arbitrary code over a network. Use after free is a memory...

PT-2026-87850

Name of the Vulnerable Software and Affected Versions Windows Message Queuing Queue Manager affected versions not specified Description A buffer over-read in the Windows Message Queuing Queue Manager allows an unauthorized attacker to disclose sensitive information over a network. Recommendations...

CVE-2026-69690: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-83941: Missing Authorization

Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network...

CVE-2026-84001: Out-of-bounds Read

Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network...

CVE-2026-68839: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-69591: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information over a network...

CVE-2026-69881: NULL Pointer Dereference

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...

CVE-2026-69587: NULL Pointer Dereference

Null pointer dereference in Windows IKE Extension allows an unauthorized attacker to deny service over a network...

CVE-2026-80088: Out-of-bounds Read

Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

PT-2026-87564

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-68893: Use After Free

Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69734: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

PT-2026-87820

Name of the Vulnerable Software and Affected Versions Windows Paint affected versions not specified Description A heap-based buffer overflow exists in Windows Paint, which allows an unauthorized remote attacker to execute arbitrary code on the system. The attack can be carried out over a network,...

PT-2026-88008

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

PT-2026-87218

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Insufficient granularity of access control allows an authorized attacker to elevate privileges over a network, which can lead to unauthorized system impact. Recommendations At the moment,...

CVE-2026-80081: Use After Free

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...

CVE-2026-69274: Use After Free

Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network...

CVE-2026-81952: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-67368: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...