CVE-2026-86590

Eclipse Che versions 7.79.0 through 7.121.0 contain a server-side request forgery (SSRF) in the dashboard backend's POST /dashboard/api/data/resolver endpoint. The endpoint passes a caller-supplied URL directly to an outbound HTTP GET request with no host filtering, and the operator-configured al...

Security Bulletin: Vunerabilities in IBM SDK affecting Rational Business Developer

Summary There are vulnerabilities in IBM SDK Java Technology Edition Quarterly CPU including Oracle April 2026 CPU. Rational Business Developer has provided fixes for the applicable CVEs. Vulnerability Details CVEID:CVE-2026-22021 DESCRIPTION: Easily exploitable vulnerability allows unauthenticat...

PT-2026-87343

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A use-after-free condition in the Windows Device Association Service allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory...

PT-2026-87458

Name of the Vulnerable Software and Affected Versions Windows VOLSNAP.SYS affected versions not specified Description An out-of-bounds read in the Windows VOLSNAP.SYS driver allows an authorized attacker to elevate privileges over a network. An out-of-bounds read occurs when a program reads data...

PT-2026-88146

Out-of-bounds read in Windows Key Distribution Center allows an unauthorized attacker to deny service over a network...

PT-2026-87638

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network...

PT-2026-87448

Missing authentication for critical function in Windows DHCP Server allows an authorized attacker to elevate privileges over a network...

PT-2026-87379

Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network...

PT-2026-87444

Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

PT-2026-88044

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description An out-of-bounds read exists in Microsoft Office PowerPoint, which could allow an unauthorized attacker to disclose information over a network. An out-of-bounds read occur...

PT-2026-87982

Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

PT-2026-88030

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-88004

Name of the Vulnerable Software and Affected Versions Remote Desktop Client affected versions not specified Description Improper control of code generation leads to a code injection flaw, allowing an unauthorized attacker to execute arbitrary code over a network. Recommendations At the moment,...

PT-2026-88035

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read exists in Microsoft Office, which allows an unauthorized attacker to disclose information over a network. An out-of-bounds read occurs when the software reads...

PT-2026-87516

Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...

PT-2026-88107

Name of the Vulnerable Software and Affected Versions Microsoft Azure Entra ID affected versions not specified Description Missing authorization in the Microsoft Azure Entra ID compatibility package allows an authorized attacker to elevate privileges over a network. Recommendations At the moment,...

PT-2026-87685

Name of the Vulnerable Software and Affected Versions Windows Credential Providers affected versions not specified Description A heap-based buffer overflow occurs in Windows Credential Providers, which is a memory corruption issue where data exceeds the allocated buffer on the heap. This allows a...

PT-2026-87710

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...

PT-2026-87434

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network...

PT-2026-87544

Use after free in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over a network...