PT-2026-112773

Name of the Vulnerable Software and Affected Versions Network Policy Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Network Policy Server NPS, which allows an unauthorized attacker to execute arbitrary code over a network and affect the...

PT-2026-112767

Name of the Vulnerable Software and Affected Versions Network Policy Server affected versions not specified Description A use after free issue exists in the Network Policy Server NPS, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Use...

PT-2026-113439

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when a program writes...

PT-2026-112817

Name of the Vulnerable Software and Affected Versions Windows Internet Connection Sharing ICS affected versions not specified Description A heap-based buffer overflow occurs in Windows Internet Connection Sharing ICS, which allows an authorized attacker to execute arbitrary code over an adjacent...

PT-2026-112833

Name of the Vulnerable Software and Affected Versions Skype for Business affected versions not specified Microsoft Lync affected versions not specified Description Improper authorization allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...

PT-2026-112858

Name of the Vulnerable Software and Affected Versions Windows Secure Socket Tunneling Protocol SSTP affected versions not specified Description A use after free issue in the Windows Secure Socket Tunneling Protocol SSTP allows an unauthorized remote attacker to execute arbitrary code over a netwo...

PT-2026-112857

Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network...

PT-2026-112912

Name of the Vulnerable Software and Affected Versions Azure Storage Library affected versions not specified Description Improper neutralization of special elements in output used by a downstream component injection allows an authorized attacker to elevate privileges over a network. Recommendation...

PT-2026-112554

Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description Improper control of code generation leads to a code injection issue, allowing an authorized attacker to execute arbitrary code over a network and affect the system...

PT-2026-112574

Name of the Vulnerable Software and Affected Versions Windows CCFFilter Driver affected versions not specified Description A use after free issue in the Windows CCFFilter Driver allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Use after free i...

PT-2026-112625

Name of the Vulnerable Software and Affected Versions Windows GDI affected versions not specified Description A stack-based buffer overflow occurs in Windows GDI, which allows an unauthorized attacker to cause a denial of service over a network. A stack-based buffer overflow is a condition where ...

PT-2026-112610

Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network...

PT-2026-112621

Integer underflow wrap or wraparound in Windows WLAN Service allows an unauthorized attacker to deny service over a network...

PT-2026-112344

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

PT-2026-112446

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An out-of-bounds read occurs in the DNS Server, which allows an unauthorized attacker to cause a denial of service over a network. This issue enables attackers to negatively affect the...

PT-2026-113382

🚨 CVE-2026-75995 ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. The vulnerable component is restrict...

PT-2026-112473

Out-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network...

PT-2026-112309

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...

PT-2026-112272

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An issue involving type confusion occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to execute arbitrary code over a network, potentially...

PT-2026-112353

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description An issue exists where improper neutralization of special elements used in an SQL command leads to SQL injection. This allows an authorized attacker to elevate privileges...