Microsoft Windows: CVE-2026-96952: Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-100202: Windows Message Queuing Queue Manager Remote Code Execution Vulnerability

Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network...

CVE-2026-100202: Use After Free

Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network...

PT-2026-112267

A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this...

Microsoft Visual Studio: CVE-2026-70162: .NET Denial of Service Vulnerability

A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET web application. A remote unauthenticated attacker could exploit this...

Microsoft Office: CVE-2026-97751: Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

Microsoft Office: CVE-2026-97754: Microsoft Office Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

CVE-2026-109114: Improper Authentication

A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. This vulnerability affects unknown code of the file User/login.php of the component Login Form. Such manipulation of the argument email/passwd leads to improper...

PT-2026-111369

Name of the Vulnerable Software and Affected Versions APOGEE MBC PPC BACnet affected versions not specified APOGEE MBC PPC P2 Ethernet affected versions not specified APOGEE MEC PPC BACnet affected versions not specified APOGEE MEC PPC P2 Ethernet affected versions not specified APOGEE PXC Compac...

PT-2026-111940

Name of the Vulnerable Software and Affected Versions Microsoft Office Visio affected versions not specified Description A heap-based buffer overflow exists in Microsoft Office Visio. This issue occurs when the application fails to properly manage memory allocation in the heap, which is a region ...

PT-2026-111404

Name of the Vulnerable Software and Affected Versions Capital Embedded AR Classic 431-422 affected versions not specified Capital Embedded AR Classic R20-11 versions prior to V2303 Desigo PXC00-E.D versions V2.3 and later Desigo PXC00-U versions V2.3 and later Desigo PXC001-E.D versions V2.3 and...

CVE-2026-102855: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Visio allows an unauthorized attacker to execute code over a network...

CVE-2026-109116: Authorization Bypass Through User-Controlled Key

A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqliquery of the component Order Management. Executing a manipulation of the argument ID can lead to authorization bypass. The attack can be...

Microsoft Windows: CVE-2026-85928: Windows Volume Manager Extension Driver Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...

ROS-20261013-73-0247

The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-109156: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function extractenv of the file mlserver/env.py of the component environmenttarball Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The vendor was contacted early about th...

CVE-2026-70571: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-88115: Windows Server for NFS Remote Code Execution Vulnerability

Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network...

PT-2026-112022

Name of the Vulnerable Software and Affected Versions Windows Message Queuing affected versions not specified Description A use after free issue in Windows Message Queuing allows an unauthorized attacker to execute code over a network. Use after free is a memory corruption flaw that occurs when a...

CVE-2026-102870: Improper Control of Generation of Code

Improper control of generation of code 'code injection' in ASP.NET Core allows an unauthorized attacker to execute code over a network...