PT-2026-113453

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

PT-2026-113432

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when a program writes...

PT-2026-113435

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer...

PT-2026-113436

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to execute arbitrary code locally or remotely, potentially affecting the entire system. A heap-based buffer overflow occurs when ...

Microsoft Windows: CVE-2026-96325: Windows SMB Server Denial of Service Vulnerability

Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network...

CVE-2026-88115: Out-of-bounds Read

Out-of-bounds read in Windows Server for NFS allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-96246: Network Policy Server (NPS) Information Disclosure Vulnerability

Out-of-bounds read in Network Policy Server NPS allows an unauthorized attacker to disclose information over a network...

CVE-2026-102603: Unverified Password Change

Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Prior to 3.0.0, the password change endpoint POST /current/user/password accepts a valid client token without requiring the account's current password or another elevated authentication step. An attack...

MiracleLinux 8 : httpd:2.4 bug fix and enhancement update (AXBA:2026-2033:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXBA:2026-2033:01 advisory. - An integer overflow in the case of failed ACME certificate renewal leads, after a number of failures 30 days in default configurations, to the backoff time...

PT-2026-112880

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-97836: Role: DNS Server Information Disclosure Vulnerability

Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Axios vulnerabilities (USN-8638-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8638-1 advisory. Ameer Assadi discovered that Axios did not properly handle certain hostnames when applying NOPROXY rules. An attacker...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Apache HTTP Server vulnerabilities (USN-8898-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8898-1 advisory. It was discovered that Apache HTTP Server's modrewrite module incorrectly handled...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Erlang vulnerabilities (USN-8901-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8901-1 advisory. Wander Nauta discovered that Erlang incorrectly handled absolute paths when...

PT-2026-113247

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An out-of-bounds read allows an authorized attacker to disclose sensitive information over a network, which can subsequently affect the system. Recommendations At the moment, there is no...

KLA91344 Multiple vulnerabilities in Microsoft SQL Server

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote...

KLA91340 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, spoof user interface, gain privileges, obtain sensitive information, cause denial of service. Below is a complete list of...

PT-2026-111805

Name of the Vulnerable Software and Affected Versions Visual Studio Tools for Applications affected versions not specified SQL Server Management Studio affected versions not specified Visual Studio Copilot extension affected versions not specified Description Improper control of code generation...

PT-2026-113466

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A stack-based buffer overflow allows an authorized attacker to elevate privileges over a network. A stack-based buffer overflow occurs when a program writes more data to a buffer located o...

Microsoft SQL Server: CVE-2026-96956: SQL Server Elevation of Privilege Vulnerability

Stack-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...