PT-2026-113250

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

PT-2026-112389

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2016 CU23 Microsoft Exchange Server 2019 CU14 Microsoft Exchange Server 2019 CU15 Microsoft Exchange Server Subscription Edition RTM Description A stack-based buffer overflow exists in the internal content-conversion...

CVE-2026-95696: Uncontrolled Resource Consumption

IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to cause a denial of service due to an uncaught exception...

PT-2026-112465

Name of the Vulnerable Software and Affected Versions Network Policy Server affected versions not specified Description An out-of-bounds read occurs in the Network Policy Server NPS, which allows an unauthorized attacker to cause a denial of service over a network. An out-of-bounds read is a...

Microsoft Windows: CVE-2026-70058: Windows DHCP Server Remote Code Execution Vulnerability

Out-of-bounds write in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83691: Windows DHCP Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83889: Windows DNS Server Remote Code Execution Vulnerability

Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network...

Microsoft SQL Server: CVE-2026-88088: Microsoft SQL Server Elevation of Privilege Vulnerability

Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally...

PT-2026-111380

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC Drive Controller CPU 1504D TF affected versions not specified Description Devices do not properly restrict executable content within imported trace files. An attacker could social engineer an authorized user with the "Read...

Microsoft SQL Server: CVE-2026-85876: Microsoft SQL Server Elevation of Privilege Vulnerability

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

PT-2026-113257

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

PT-2026-112702

Name of the Vulnerable Software and Affected Versions Windows Telephony Server affected versions not specified Description A use after free issue in Windows Telephony Server allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

PT-2026-113435

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-113455

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...

Microsoft SQL Server: CVE-2026-94512: SQL Server Remote Code Execution Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

PT-2026-113444

Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...

PT-2026-111844

Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...

PT-2026-113132

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-96926: Role: DNS Server Tampering Vulnerability

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

PT-2026-112225

Name of the Vulnerable Software and Affected Versions Windows Server 2019 Windows Server 2022 Windows Server 2025 Description An untrusted pointer dereference in the Windows Kernel, specifically within the mup.sys driver, allows an unauthorized attacker to cause a denial-of-service or elevate...