CVE-2026-109890: Missing Authorization

Missing Authorization vulnerability in LeapWorx Premium Addons for Elementor premium-addons-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premium Addons for Elementor: from n/a through 4.11.110...

PT-2026-113153

Name of the Vulnerable Software and Affected Versions Microsoft Windows Shell versions prior to October 13, 2026 Windows 10 affected versions not specified Windows 11 versions 23H2 through 26H2 Windows Server versions 2012 R2 through 2025 Description Improper neutralization of special elements us...

PT-2026-112031

Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description An untrusted pointer dereference in the Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

PT-2026-112025

Name of the Vulnerable Software and Affected Versions Windows SmartScreen affected versions not specified Description Improper resolution of path equivalence allows an unauthorized attacker to bypass a security feature over a network. Recommendations At the moment, there is no information about a...

KLA91333 Multiple vulnerabilities in Mozilla Thunderbird

Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Denia...

PT-2026-112230

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A stack-based buffer overflow in the Windows Resilient File System ReFS allows an unauthorized attacker to bypass a security feature. This issue can be triggered vi...

Microsoft Windows: CVE-2026-83885: Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability

Inadequate encryption strength in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to perform spoofing locally...

Microsoft Windows: CVE-2026-83722: Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88161: Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

Use after free in Windows Local Security Authority LSA allows an authorized attacker to elevate privileges locally...

PT-2026-113534

CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue does not require user...

CVE-2026-96951: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-102851: Incorrect Privilege Assignment

Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally...

CVE-2026-108463: Improper Resolution of Path Equivalence

Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-108493: Missing Authorization

Missing Authorization vulnerability in Karolína Vyskočilová Pay for Payment for WooCommerce woocommerce-pay-for-payment allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pay for Payment for WooCommerce: from n/a through 3.0.1...

CVE-2026-109699: Missing Authorization

Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects User Registration: from n/a through 5.2.8...

CVE-2026-109896: Missing Authorization

Missing Authorization vulnerability in WP Chill Download Monitor integration for WooCommerce download-monitor-integration-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Download Monitor integration for WooCommerce: from n/a through 1.0.3...

PT-2026-113507

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description An Improper Access Control issue exists that could lead to a security feature bypass. This allows an attacker to circumvent security measures and obtain unauthorized write...

CVE-2026-106620: Incorrect Authorization

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...

CVE-2026-105994: Incorrect Authorization

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...

PT-2026-113362

Name of the Vulnerable Software and Affected Versions ColdFusion affected versions not specified Description An Incorrect Authorization issue allows a low-privileged attacker to bypass security measures and obtain unauthorized write access. This security feature bypass does not require any user...