373074 matches found
PT-2026-112877
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
PT-2026-113269
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113132
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...
PT-2026-111844
Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...
CVE-2026-107615
An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init and ThemeLib load screenhooks32.dll / screenhooks64.dll with LoadLibrary using a bare fi...
PT-2026-112778
Name of the Vulnerable Software and Affected Versions Network Policy Server affected versions not specified Description A use after free issue exists in the Network Policy Server NPS, which allows an unauthorized attacker to execute arbitrary code over an adjacent network, potentially affecting t...
PT-2026-112940
Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A use-after-free condition in the Windows SMB Server allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...
PT-2026-112339
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Server-side request forgery SSRF allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where a server is tricked into making requests to an...
PT-2026-112913
Name of the Vulnerable Software and Affected Versions Windows DCOM Server affected versions not specified Description A race condition occurs in the Windows DCOM Server due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally. ...
PT-2026-111976
Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description Incorrect default permissions in the service allow an authorized attacker to elevate privileges locally, which enables them to affect the system. Recommendations At the...
PT-2026-113368
Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 26.0.0.9 Description A privilege escalation issue exists when the restConnector-2.0 feature is enabled. Recommendations At the moment, there is no information about a newer...
PT-2026-111402
Name of the Vulnerable Software and Affected Versions RUGGEDCOM CROSSBOW versions prior to V6.0 Description Insufficient server-side authorization checks for requests to schedule special operations allow an authenticated attacker with minimal privileges to schedule unauthorized operations on the...
PT-2026-112773
Name of the Vulnerable Software and Affected Versions Network Policy Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Network Policy Server NPS, which allows an unauthorized attacker to execute arbitrary code over a network and affect the...
Microsoft Windows: CVE-2026-70087: Role: DNS Server Security Feature Bypass Vulnerability
Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally...
Microsoft Windows: CVE-2026-70083: Role: DNS Server Tampering Vulnerability
Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally...
Microsoft Windows: CVE-2026-70127: Windows Domain Name Service Remote Code Execution Vulnerability
Use after free in DNS Server allows an unauthorized attacker to execute code over a network...
PT-2026-113248
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...
PT-2026-113263
Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network...