PT-2026-58216

Name of the Vulnerable Software and Affected Versions Windows Internet Key Exchange IKE Protocol affected versions not specified Description A heap-based buffer overflow exists in the Windows Internet Key Exchange IKE Protocol. This issue allows an unauthorized network attacker to cause a denial ...

PT-2026-58502

Name of the Vulnerable Software and Affected Versions Windows Active Directory affected versions not specified Description An out-of-bounds read occurs in Windows Active Directory, which allows an authorized attacker to cause a denial of service over a network. An out-of-bounds read is a conditio...

PT-2026-58806

Name of the Vulnerable Software and Affected Versions .NET versions prior to 8.0.29 .NET versions prior to 9.0.18 .NET versions prior to 10.0.10 Description An issue exists where the allocation of resources occurs without limits or throttling, allowing an unauthorized attacker to cause a denial o...

CVE-2026-50338: Improper Authentication

Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network...

PT-2026-58123

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow exists in the Windows Bluetooth Port Driver. This issue allows an unauthorized attacker located on an adjacent network to execute arbitrary code and...

CVE-2026-50411: Stack-based Buffer Overflow

Stack-based buffer overflow in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-50324: Loop with Unreachable Exit Condition

Loop with unreachable exit condition 'infinite loop' in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-50380: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network...

CVE-2026-50368: Stack-based Buffer Overflow

Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network...

CVE-2026-58617: Improper Access Control

Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network...

PT-2026-58437

Name of the Vulnerable Software and Affected Versions Windows Runtime affected versions not specified Description A race condition occurs in the Windows Runtime due to improper synchronization when using a shared resource. This allows an unauthorized attacker to elevate privileges over a network...

PT-2026-58594

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A null pointer dereference in the Windows SMB Server allows an authorized attacker to cause a denial of service over a network. A null pointer dereference occurs when a program...

CVE-2026-50415: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized attacker to disclose information over a network...

PT-2026-58171

Name of the Vulnerable Software and Affected Versions Windows Local Security Authority Subsystem Service LSASS affected versions not specified Description Uncontrolled resource consumption in the Local Security Authority Subsystem Service LSASS allows an authorized attacker to cause a denial of...

PT-2026-58390

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description A stack-based buffer overflow exists in Active Directory Federation Services AD FS, which allows an unauthenticated attacker to remotely trigger a denial of servi...

PT-2026-58695

Name of the Vulnerable Software and Affected Versions Microsoft Configuration Manager version 2509 Description Improper access control allows an authorized attacker to elevate privileges over a network. This issue can be part of an exploit chain involving broken access, CAB arbitrary-write path...

PT-2026-58329

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description A use-after-free flaw in the Windows Runtime allows an authorized network user to elevate their privileges to administrator level. Use-after-free is a memory corruption issue that occurs...

CVE-2026-55020: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-55002: External Control of File Name or Path

External control of file name or path in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-9653: Improper Validation of Integrity Check Value

A denial-of-service security issue exists across all the 1756-EN2, EN3, and ENBT communication module due to improper validation of CIP Implicit Connection packets. An attacker on the network can exploit this by sending crafted packets to continuously disrupt device connections, though device...