Microsoft SharePoint: CVE-2026-102863: Microsoft Office SharePoint Elevation of Privilege Vulnerability

Improper control of generation of code 'code injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

Microsoft SharePoint: CVE-2026-102862: Microsoft Office SharePoint Elevation of Privilege Vulnerability

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

Microsoft SharePoint: CVE-2026-102861: Microsoft Office SharePoint Elevation of Privilege Vulnerability

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

Microsoft SharePoint: CVE-2026-102860: Microsoft Office SharePoint Elevation of Privilege Vulnerability

Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

Microsoft Office: CVE-2026-102858: Microsoft Office: CVE-2026-102858

Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code over a network...

Microsoft VS Code: CVE-2026-102234: Visual Studio Code Security Feature Bypass Vulnerability

Reliance on untrusted inputs in a security decision in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

Microsoft Exchange: CVE-2026-87696: Microsoft Exchange Server Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-103576: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Url redirection to untrusted site 'open redirect' in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

PT-2026-112589

Name of the Vulnerable Software and Affected Versions Windows IKE Extension affected versions not specified Description A heap-based buffer overflow occurs in the Windows IKE Extension, which allows an unauthorized attacker to cause a denial of service over a network. A heap-based buffer overflow...

PT-2026-112084

Name of the Vulnerable Software and Affected Versions Network Device Enrollment Service affected versions not specified Description Weak authentication in the Network Device Enrollment Service NDES allows an unauthorized remote attacker to execute arbitrary code over a network, which can affect t...

Microsoft Windows: CVE-2026-69577: Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker to disclose information over a network...

PT-2026-112881

Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

PT-2026-111978

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

PT-2026-113454

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when a program writes...

PT-2026-112187

Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

PT-2026-112198

Name of the Vulnerable Software and Affected Versions Windows Netlogon affected versions not specified Description An issue exists where resources are allocated without limits or throttling, which allows an authorized attacker to cause a denial of service over a network. Recommendations At the...

Microsoft Windows: CVE-2026-70006: Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

PT-2026-112156

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70005: Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-112155

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the...