Microsoft Windows Command Injection Vulnerability

Microsoft Windows Shell contains a command injection vulnerability that allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-111939

Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally...

python-tornado security update

6.5.10-1.1 - Update to 6.5.10 Resolves: RHEL-274870...

Microsoft ASP.NET: CVE-2026-70188: ASP.NET Core Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-109744: Undefined Security Weakness

Other issue in the DOM: File component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

PT-2026-111965

Name of the Vulnerable Software and Affected Versions Microsoft QUIC affected versions not specified Description Insecure default variable initialization allows an unauthorized remote attacker to bypass a security feature, specifically authentication, over a network. Recommendations At the moment...

KLA91329 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Track can be exploited...

PT-2026-111921

Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description A use-after-free condition in the Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

KLA91330 Multiple vulnerabilities in Mozilla Thunderbird ESR

Multiple vulnerabilities were found in Mozilla Thunderbird ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1...

CVE-2026-110084: XML Injection (aka Blind XPath Injection)

Adobe Experience Manager is affected by an XML Injection aka Blind XPath Injection vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitatio...

microcode_ctl security, bug fix, and enhancement update

20260812-1.0.2 - disable late update for 06-ad-01 20260812-1.0.1 - enable use with ueknext and UEK8 kernels - don't bother calling dracut if virtualized - ensure UEK also rebuilds initramfs - enable early update for 06-4f-01 - enable early and late load on RHCK 4:20260812-1 - Update Intel CPU...

PT-2026-111936

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Reliance on untrusted inputs in a security decision allows an unauthorized attacker to bypass the Workspace Trust security feature over a network. Workspace Trust is designed to...

PT-2026-112230

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A stack-based buffer overflow in the Windows Resilient File System ReFS allows an unauthorized attacker to bypass a security feature. This issue can be triggered vi...

Microsoft Windows: CVE-2026-83885: Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability

Inadequate encryption strength in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to perform spoofing locally...

Microsoft Windows: CVE-2026-83722: Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88161: Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

Use after free in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-102211: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Use after free in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

PT-2026-112031

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

PT-2026-113534

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user...

KLA91336 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...