Microsoft Exchange Server Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

PT-2026-48117

Name of the Vulnerable Software and Affected Versions Windows HTTP.sys affected versions not specified Description An unauthenticated remote attacker can cause a denial of service in the Windows kernel-mode web listener core HTTP.sys by exploiting uncontrolled resource consumption in HTTP/2. The...

PT-2026-47882

Name of the Vulnerable Software and Affected Versions Windows Kerberos affected versions not specified Description A null pointer dereference in Windows Kerberos allows an authorized attacker to cause a denial of service over a network. A null pointer dereference occurs when a program attempts to...

PT-2026-47907

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An integer underflow wrap or wraparound in Windows Performance Monitor allows an unauthorized attacker to execute code over a network. Integer underflow occurs when an arithmetic...

PT-2026-47902

Name of the Vulnerable Software and Affected Versions Windows Performance Monitor affected versions not specified Description An integer underflow wrap or wraparound in Windows Performance Monitor allows an unauthorized attacker to execute code over a network. This condition can lead to remote co...

PT-2026-47952

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

PT-2026-48025

Name of the Vulnerable Software and Affected Versions Windows HTTP.sys affected versions not specified Description An integer overflow or wraparound exists in the Windows HTTP Protocol Stack kernel-mode driver HTTP.sys. The issue occurs during the dynamic expansion of the buffer array in the UL...

CVE-2026-45453: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-47281: Missing Authorization

Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-45602: Acceptance of Extraneous Untrusted Data With Trusted Data

No cwe for this issue in Windows DHCP Server allows an unauthorized attacker to perform tampering over a network...

CVE-2026-45591: Uncontrolled Resource Consumption

Uncontrolled resource consumption in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-45454: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-42993: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-44815: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows DHCP Client allows an unauthorized attacker to execute code over a network...

CVE-2026-45599: Use After Free

Use after free in Universal Plug and Play upnp.dll allows an unauthorized attacker to execute code over a network...

CVE-2026-45465: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-40371: Improper Handling of Insufficient Permissions or Privileges

Improper handling of insufficient permissions or privileges in Microsoft Dynamics 365 on-premises allows an authorized attacker to elevate privileges over a network...

CVE-2026-50508: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-42992: Heap-based Buffer Overflow

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...