PT-2026-112776

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description Remote Code Execution in the Windows Routing and Remote Access Service RRAS allows remote attackers to execute arbitrary code, enabling unauthorized...

PT-2026-113327

Name of the Vulnerable Software and Affected Versions Omnispace Agora Project versions prior to 26.10.0 Description A code injection issue exists where unescaped, attacker-controlled values are written into the config.inc.php configuration file during installation via the File::updateConfigFile a...

PT-2026-112860

Name of the Vulnerable Software and Affected Versions Windows Volume Manager Extension Driver affected versions not specified Description A heap-based buffer overflow exists in the Windows Volume Manager Extension Driver. This issue allows an unauthorized remote attacker to execute arbitrary code...

Microsoft Windows: CVE-2026-96864: Microsoft Failover Cluster Virtual Driver Remote Code Execution Vulnerability

Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-69634: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-97766: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

PT-2026-112330

Name of the Vulnerable Software and Affected Versions Microsoft Office LTSC 2021 versions prior to 16.0.14334.20974 Microsoft Office LTSC 2024 versions prior to 16.0.17932.21056 Microsoft 365 Apps for Enterprise affected versions not specified Description A heap-based buffer overflow in Microsoft...

CVE-2026-97777: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-102856: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network...

CVE-2026-70242: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...

VulnCheck KEV: CVE-2026-1830

The Quick Playground plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.1. This is due to insufficient authorization checks on REST API endpoints that expose a sync code and allow arbitrary file uploads. This makes it possible for unauthenticated...

VulnCheck KEV: CVE-2026-15748

The Forminator Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.56.1 via the handlefileupload function. This is due to insufficient file type validation in handlefileupload, where the dangerous-extension blocklist performs exact-key matchin...

VulnCheck KEV: CVE-2026-4882

The User Registration Advanced Fields plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'URAFAJAX::methodupload' function in all versions up to, and including, 1.6.20. This makes it possible for unauthenticated attackers to upload arbitrary...

VulnCheck KEV: CVE-2026-19949

The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection via archive restore functionality in all versions up to, and including, 7.109 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

VulnCheck KEV: CVE-2023-6558

The Export and Import Users and Customers plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'uploadimportfile' function in versions up to, and including, 2.4.8. This makes it possible for authenticated attackers with shop manager-level...

VulnCheck KEV: CVE-2024-3242

The Brizy – Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file extension validation in the validateImageContent function called via storeImages in all versions up to, and including, 2.4.43. This makes it possible for authenticated attackers, with...

CVE-2026-88145: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70014: Windows Cryptographic Services Remote Code Execution Vulnerability

Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network...

CVE-2026-83519: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network...

PT-2026-113493

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description A use after free issue exists in the Network component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...