Microsoft Windows: CVE-2026-70198: Windows Push Notifications Elevation of Privilege Vulnerability

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-70198: Use After Free

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-83867: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96313: Windows Push Notifications Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-109774: Undefined Security Weakness

Invalid pointer, undefined behavior in the DOM: Notifications component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

PT-2026-113078

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A missing authentication flaw in a critical function allows an authorized attacker to elevate privileges locally, potentially affecting the system. Recommendations At the...

CVE-2026-96313: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

PT-2026-112632

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A heap-based buffer overflow exists in Windows Push Notifications. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occu...

CVE-2026-109600

Frappe Framework before 15.118.0 and 16.x before 16.31.0 does not check whether a user account is disabled before sending Document Follow email notifications. A disabled user who previously followed documents continues to receive email updates about activity on those documents after their access...

CVE-2026-109600

The Frappe Framework is affected by an improper access control vulnerability in its Document Follow email notifications system. Specifically, versions before 15.118.0 and 16.x before 16.31.0 fail to verify if a user account is disabled before sending automated email updates. As a result, a disabl...

CVE-2026-109600 Frappe before 16.31.0 Improper Access Control in Document Follow Notifications

Frappe Framework before 15.118.0 and 16.x before 16.31.0 does not check whether a user account is disabled before sending Document Follow email notifications. A disabled user who previously followed documents continues to receive email updates about activity on those documents after their access...

CVE-2026-109600 Frappe before 16.31.0 Improper Access Control in Document Follow Notifications

Frappe Framework before 15.118.0 and 16.x before 16.31.0 does not check whether a user account is disabled before sending Document Follow email notifications. A disabled user who previously followed documents continues to receive email updates about activity on those documents after their access...

EUVD-2026-97893

Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired attackers to inject notifications by writing to the proprietary BLE command characteristic. Attackers within Bluetooth range can craft commands protected only by a CRC-16/ARC...

CVE-2026-85471

A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in webhook notifications, leading to a Server-Side Request Forgery SSRF vulnerability. This allows the Quay application to be tricked into sending requests to internal network resources, such a...

CVE-2026-85471

A flaw in Quay allows an authenticated repository administrator to bypass the hostname blacklist during webhook notifications . This oversight leads to a Server-Side Request Forgery (SSRF) vulnerability, where the application can be manipulated into making requests to internal network resources, ...

EUVD-2026-97776

A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in webhook notifications, leading to a Server-Side Request Forgery SSRF vulnerability. This allows the Quay application to be tricked into sending requests to internal network resources, such a...

CVE-2026-85471

A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in webhook notifications, leading to a Server-Side Request Forgery SSRF vulnerability. This allows the Quay application to be tricked into sending requests to internal network resources, such a...

CVE-2026-109570: Missing Authentication for Critical Function

Fire-Boltt BSW013 smartwatch firmware through V0.0.8 contains a missing authentication vulnerability that allows unpaired attackers to inject notifications by writing to the proprietary BLE command characteristic. Attackers within Bluetooth range can craft commands protected only by a CRC-16/ARC...

PT-2026-110946

Name of the Vulnerable Software and Affected Versions Fire-Boltt BSW013 firmware versions prior to V0.0.9 Description Missing authentication allows unpaired attackers within Bluetooth range to inject notifications by writing to the proprietary BLE command characteristic. Attackers can craft...

CVE-2026-85471: Server-Side Request Forgery (SSRF)

A flaw was found in Quay. An authenticated repository administrator could bypass the hostname blacklist in webhook notifications, leading to a Server-Side Request Forgery SSRF vulnerability. This allows the Quay application to be tricked into sending requests to internal network resources, such a...