PT-2026-113435

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-113455

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...

Microsoft SQL Server: CVE-2026-94512: SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

PT-2026-113444

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

PT-2026-111805

Name of the Vulnerable Software and Affected Versions Visual Studio Tools for Applications affected versions not specified SQL Server Management Studio affected versions not specified Visual Studio Copilot extension affected versions not specified Description Improper control of code generation...

PT-2026-111844

Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...

PT-2026-113132

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-96926: Role: DNS Server Tampering Vulnerability

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

PT-2026-112225

Name of the Vulnerable Software and Affected Versions Windows Server 2019 Windows Server 2022 Windows Server 2025 Description An untrusted pointer dereference in the Windows Kernel, specifically within the mup.sys driver, allows an unauthorized attacker to cause a denial-of-service or elevate...

PT-2026-111576

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 8.5 and 9.0 Description An authenticated attacker can bypass authorization, which may lead to administrative impersonation across the cell. Recommendations At the moment, there is no information about ...

Microsoft Windows: CVE-2026-83722: Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

Apache HTTP Server mod_vhost_alias() Code Execution

The vulnerability of the modvhostalias function in the Apache HTTP Server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure or execute arbitrary code by sending a specially crafted HTTP...

Nginx UI Code Execution

The vulnerability of the Nginx UI server’s user interface is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2026-112979

Double free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

PT-2026-112389

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2016 CU23 Microsoft Exchange Server 2019 CU14 Microsoft Exchange Server 2019 CU15 Microsoft Exchange Server Subscription Edition RTM Description A stack-based buffer overflow exists in the internal content-conversion...

Microsoft SQL Server: CVE-2026-85919: Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-97825: Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

Microsoft Exchange: CVE-2026-70571: Microsoft Exchange Server Remote Code Execution Vulnerability

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...

PT-2026-113264

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

KLA91340 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, spoof user interface, gain privileges, obtain sensitive information, cause denial of service. Below is a complete list of...