PT-2026-64435

Name of the Vulnerable Software and Affected Versions Cloudreve versions prior to 4.17.0 Description An OAuth scope authorization bypass exists in the admin storage policy routes. A user with an OAuth bearer token scoped only to Admin.Read can access the 'POST /api/v4/admin/policy/oauth/signin'...

January 24, 2026—KB5078135 (OS Build 26100.32236) Out-of-band

January 24, 2026—KB5078135 OS Build 26100.32236 Out-of-band Applies To Windows Server 2025, all editions This out-of-band update for Windows Server 2025 KB5078135 is cumulative. It includes updates from previous security releases, along with an additional fix. To learn more about differences...

May 24, 2023—KB5026446 (OS Build 22621.1778) Preview

May 24, 2023—KB5026446 OS Build 22621.1778 Preview Applies To Windows 11 version 22H2, all editions Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows 11, version 22H2, see its...

OneDrive for iOS Disclosure

The vulnerability of the OneDrive for iOS file storage service is related to the lack of protection for service-related data. Exploiting this vulnerability can allow a malicious actor to disclose protected information...