PT-2026-111805

Name of the Vulnerable Software and Affected Versions Visual Studio Tools for Applications affected versions not specified SQL Server Management Studio affected versions not specified Visual Studio Copilot extension affected versions not specified Description Improper control of code generation...

PT-2026-111855

Name of the Vulnerable Software and Affected Versions Fossify File Manager versions prior to 1.6.3 Description A path traversal issue exists where crafted ZIP archives can write files outside the intended extraction folder. This occurs because of an unanchored startsWith check, allowing attackers...

PT-2026-112266

Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-112315

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A relative path traversal issue exists in Windows Shell. This flaw allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...

PT-2026-112107

Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally...

PT-2026-112134

Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Libarchive allows an unauthorized attacker to perform tampering over a network...

UBUNTU-CVE-2026-107615

An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init and ThemeLib load screenhooks32.dll / screenhooks64.dll with LoadLibrary using a bare fi...

UBUNTU-CVE-2026-107614

An integer underflow in WinCursorShapeUtils::trimTransparent in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a width or height of zero to be processed on the DXGI...

flatpak security update

1.12.9-4.0.1 - Restore the flatpak-builder 1.0.0 subpackage Orabug: 40105180 - Move flatpak-session-helper back into flatpak Orabug: 40105180 1.12.9-4 - Import to OL7 Orabug: 39695281 1.12.9-4 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165633 - Fi...

Microsoft Windows: CVE-2026-108463: Windows SmartScreen Security Feature Bypass Vulnerability

Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...

Microsoft Windows: CVE-2026-102217: WebDAV Elevation of Privilege Vulnerability

Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network...

Microsoft SharePoint: CVE-2026-85932: Microsoft Office SharePoint Information Disclosure Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-70184: Windows Backup Engine Elevation of Privilege Vulnerability

Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83923: Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83873: Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83683: Windows Encrypting File System (EFS) Information Disclosure Vulnerability

Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-83509: Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83506: Servicing Stack Updates Elevation of Privilege Vulnerability

Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69783: Windows Update Elevation of Privilege Vulnerability

External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69733: Windows Update Elevation of Privilege Vulnerability

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...