PT-2026-88531

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in Extensions allows a remote attacker to obtain sensitive information through the use of a crafted Chrome extension. Recommendations Update Google Chrome to versi...

PT-2026-88694

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in DataTransfer allows a remote attacker who has compromised the renderer process to obtain sensitive information through a crafted HTML page. Recommendations...

PT-2026-88690

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in the Passwords component allows a remote attacker to potentially leak sensitive information through the use of crafted network traffic. Recommendations Updat...

PT-2026-88705

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in the Contacts component allows a remote attacker to potentially obtain sensitive information. This requires the attacker to have already compromised the renderer...

PT-2026-87681

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue in the Windows Kernel allows an authorized attacker to disclose sensitive system information to an unauthorized control sphere over a network. Recommendations At the moment,...

EUVD-2026-72958

mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbConnect/data. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

PT-2026-87561

Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network...

PT-2026-87171

Name of the Vulnerable Software and Affected Versions FortiSandbox versions 5.0.0 through 5.0.5 FortiSandbox versions 4.4.0 through 4.4.8 FortiSandbox versions 4.2.1 through 4.2.8 FortiSandbox Cloud versions 5.0.4 through 5.0.5 FortiSandbox PaaS versions 5.0.4 through 5.0.5 Description An imprope...

UBUNTU-CVE-2026-69806

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-88477

Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-87017

Name of the Vulnerable Software and Affected Versions Snowflake Connector for Python versions prior to 4.7.3 Snowflake Go Driver versions prior to 2.2.0 Snowflake JDBC Driver versions prior to 4.3.4 Snowflake Node.js Driver versions prior to 3.3.0 Snowflake PHP PDO Driver versions prior to 4.2.0...

PT-2026-87732

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An issue in .NET allows an authorized attacker to elevate privileges locally through the exposure of sensitive information to an unauthorized actor. Recommendations At the moment, there is no...

PT-2026-88076

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An issue exists where sensitive system information is exposed to an unauthorized control sphere, allowing an unauthorized attacker to disclose information locally...

CVE-2026-86464: Exposure of Sensitive Information to an Unauthorized Actor

In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager IdM deployment included insecure default configurations and credentials for security-sensitive services. The Helm chart exposed the Keycloak service and its PostgreSQL...

PT-2026-87217

Name of the Vulnerable Software and Affected Versions Microsoft Teams for Android versions prior to 1416/1.0.0.2026133602 Description An information disclosure flaw allows an authorized attacker with low privileges to leak sensitive information, such as credentials, over a network. This occurs wh...

PT-2026-87749

Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally...

PT-2026-87655

Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally...

EUVD-2026-72910

An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...

PT-2026-87441

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue in the Windows Kernel allows an authorized attacker to locally disclose sensitive system information to an unauthorized control sphere. Recommendations At the moment, there is...

CVE-2026-69806: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...