CVE-2026-102238: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

PT-2026-111896

Name of the Vulnerable Software and Affected Versions Network Policy Server affected versions not specified Description A heap-based buffer overflow occurs in the Network Policy Server NPS, which allows an unauthorized attacker to execute arbitrary code over a network and affect the system. A...

Microsoft Windows: CVE-2026-70079: Windows DNS Denial of Service Vulnerability

Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-69973: Windows libarchive Tampering Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Libarchive allows an unauthorized attacker to perform tampering over a network...

CVE-2026-83766: Incorrect Authorization

Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network...

CVE-2026-70079: Improper Enforcement of Behavioral Workflow

Improper enforcement of behavioral workflow in Windows DNS allows an unauthorized attacker to deny service over a network...

CVE-2026-85900: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-105727: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...

CVE-2026-102861: Missing Authorization

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-97739: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-97749: Double Free

Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

CVE-2026-85840: Files or Directories Accessible to External Parties

Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network...

CVE-2026-85888: Out-of-bounds Read

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

Microsoft Office: CVE-2026-88195: Microsoft Office Excel Information Disclosure Vulnerability

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...

Autonomous Cyber Operations Gym for Training and Evaluating AI Models for Defence

This paper proposes an Autonomous Cyber Operations ACO gym, a unified framework integrating high-fidelity network emulation, realistic user behaviour modelling for benign network traffic and adversarial profiles, and the generation of cybersecurity scenarios through open toolkits. By supporting...

PT-2026-111948

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper control of code generation leads to a code injection issue, allowing an authorized attacker to elevate privileges over a network. Recommendations At the moment,...

PT-2026-111949

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network...

PT-2026-112029

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network...

Microsoft Office: CVE-2026-88203: Microsoft Office PowerPoint Information Disclosure Vulnerability

Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

PT-2026-111821

SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to retrieve a snapshot of the live feed without authentication...