Win32k Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally...

EUVD-2026-43637

In versions up to and including 4.5.29 4.x branch and 5.1.4 5.x branch, the WebClientSession component of Eclipse Vert.x Web Client does not validate that the Domain attribute of a Set-Cookie response header matches the originating server's domain, in violation of RFC 6265 section 5.3. An attacke...

CVE-2026-15076

In versions up to and including 4.5.29 4.x branch and 5.1.4 5.x branch, the WebClientSession component of Eclipse Vert.x Web Client does not validate that the Domain attribute of a Set-Cookie response header matches the originating server's domain, in violation of RFC 6265 section 5.3. An attacke...

CVE-2026-15076

Vulnerability context: CVE-2026-15076 affects Eclipse Vert.x Web Client’s WebClientSession (versions up to 4.5.29 and 5.1.4). The issue is that the Domain attribute of a Set-Cookie header is not validated against the originating server’s domain. Root cause: WebClientSession stores cookies without...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure in the handleNavigate function of the file pkg/browser/tool.go when manipulating the args.targetUrl argument. An attacker can access sensitive information by sending crafted requests remotely. Remediation There is n...

PT-2026-58433

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

PT-2026-58388

Name of the Vulnerable Software and Affected Versions Windows Overlay Filter affected versions not specified Description An issue in the Windows Overlay Filter allows an authorized local attacker to disclose sensitive information. This flaw enables local users to access data that should be...

PT-2026-58369

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally...

PT-2026-58374

Name of the Vulnerable Software and Affected Versions Windows Media affected versions not specified Description An issue in Windows Media allows an authorized attacker to locally disclose sensitive information, which can subsequently affect the system. Recommendations At the moment, there is no...

PT-2026-58409

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description An issue in Windows Push Notifications allows an authorized attacker to locally disclose sensitive information to an unauthorized actor, which can affect the system...

PT-2026-58217

Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

PT-2026-58448

Name of the Vulnerable Software and Affected Versions Windows File Explorer affected versions not specified Description An issue in Windows File Explorer allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Recommendations At the moment, there is no...

PT-2026-58778

Adobe Commerce is affected by an Information Exposure vulnerability that could lead to a limited disclosure of sensitive information. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction...

PT-2026-58395

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description An issue in Windows Win32K allows an authorized attacker to locally disclose sensitive information to an unauthorized actor, which can affect the system. Recommendations At the moment,...

PT-2026-58199

Name of the Vulnerable Software and Affected Versions Windows Trusted Runtime Interface Driver affected versions not specified Description An authorized attacker can locally disclose sensitive information due to an exposure of sensitive data within the Windows Trusted Runtime Interface Driver...

PT-2026-58602

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description An issue in Windows Win32K allows an authorized attacker to locally disclose sensitive information, which can potentially affect the system. Recommendations At the moment, there is no...

PT-2026-58677

Insertion of sensitive information into a file in the Recovery Kit response file generation feature in Devolutions Server 2026.1.22.0, 2026.2.11.0 allows an attacker with access to the generated response file to obtain the Azure Key Vault client secret in cleartext, even when the option to exclud...

CVE-2026-52101

The andreimarcu linux-server (versions v.1.0 through v.2.3.8) is affected by a vulnerability that allows a remote attacker to obtain sensitive information . The root cause is located within the uploadRemote function in the upload.go file. While specific remediation steps are not provided in the d...

PT-2026-58115

Name of the Vulnerable Software and Affected Versions Windows Audio Service affected versions not specified Description An issue in the Windows Audio Service allows an authorized attacker to locally disclose sensitive information to an unauthorized actor. Recommendations At the moment, there is n...

PT-2026-60107

Name of the Vulnerable Software and Affected Versions n8n-mcp versions prior to 2.57.4 Description In multi-tenant HTTP mode, an authenticated tenant can access local default-scope workflow versions backups instead of being restricted to their own tenant scope. This issue allows an authenticated...