PT-2026-111944

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network. Cross-si...

PT-2026-112288

Name of the Vulnerable Software and Affected Versions Remote Desktop Gateway Service affected versions not specified Description A use after free issue in the Remote Desktop Gateway Service allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use...

PT-2026-111946

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Missing authorization allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that...

PT-2026-112084

Name of the Vulnerable Software and Affected Versions Network Device Enrollment Service affected versions not specified Description Weak authentication in the Network Device Enrollment Service NDES allows an unauthorized remote attacker to execute arbitrary code over a network, which can affect t...

Microsoft SQL Server: CVE-2026-96956: SQL Server Elevation of Privilege Vulnerability

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

Microsoft SharePoint: CVE-2026-70267: Microsoft Office SharePoint Remote Code Execution Vulnerability

Inclusion of functionality from untrusted control sphere in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70079: Windows DNS Denial of Service Vulnerability

Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network...

PT-2026-113218

Name of the Vulnerable Software and Affected Versions Microsoft Office OneNote affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized attacker to execute code over a network. Recommendations At...

PT-2026-112507

Name of the Vulnerable Software and Affected Versions Windows Wi-Fi Driver affected versions not specified Description An out-of-bounds read occurs in the Windows Wi-Fi Driver, which allows an unauthorized attacker located on an adjacent network to cause a denial of service. An out-of-bounds read...

Microsoft Windows: CVE-2026-70207: Network Policy Server (NPS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Network Policy Server NPS allows an authorized attacker to execute code over a network...

PT-2026-112610

Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network...

PT-2026-112912

Name of the Vulnerable Software and Affected Versions Azure Storage Library affected versions not specified Description Improper neutralization of special elements in output used by a downstream component injection allows an authorized attacker to elevate privileges over a network. Recommendation...

PT-2026-112858

Name of the Vulnerable Software and Affected Versions Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description A use after free issue in the Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized remote attacker to execute arbitrary code over a netwo...

PT-2026-112010

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description An issue in Active Directory Federation Services allows an unauthorized attacker to perform spoofing over a network, which enables them to affect the system...

PT-2026-111949

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network...

PT-2026-112775

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description An out-of-bounds read occurs in the Windows Routing and Remote Access Service RRAS, which allows an unauthorized attacker to cause a denial of service...

Microsoft Windows: CVE-2026-70069: Windows DHCP Server Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83665: Windows DHCP Server Denial of Service Vulnerability

Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

PT-2026-112773

Name of the Vulnerable Software and Affected Versions Network Policy Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Network Policy Server NPS, which allows an unauthorized attacker to execute arbitrary code over a network and affect the...

Microsoft Windows: CVE-2026-85324: Active Directory Federation Services (AD FS) Denial of Service Vulnerability

Memory allocation with excessive size value in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...