PT-2026-87860

Name of the Vulnerable Software and Affected Versions Windows Deployment Services affected versions not specified Description A use after free condition in Windows Deployment Services allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Use after fr...

PT-2026-87609

Name of the Vulnerable Software and Affected Versions Windows Deployment Services affected versions not specified Description A use-after-free condition exists in Windows Deployment Services, which allows an unauthorized remote attacker to execute arbitrary code over a network and affect the...

PT-2026-87500

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description An untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. A pointer dereference occurs when a...

PT-2026-87539

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A use after free issue in Active Directory Domain Services allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use...

PT-2026-87334

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use after free issue in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that...

CVE-2026-69809: Missing Release of Memory after Effective Lifetime

Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

CVE-2026-69624: Incomplete List of Disallowed Inputs

Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...

CVE-2026-78445: Use After Free

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-73024: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70585: Use After Free

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally...

CVE-2026-69524: Use After Free

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

CVE-2026-72954: Use After Free

Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...

CVE-2026-72978: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

CVE-2026-80096: Out-of-bounds Read

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

PT-2026-87201

Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...

PT-2026-87870

Name of the Vulnerable Software and Affected Versions Windows Deployment Services affected versions not specified Description A use after free condition in Windows Deployment Services allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Use after fr...

PT-2026-87921

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A heap-based buffer overflow occurs in Windows Management Services, which allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow ...

PT-2026-87534

🚨 HIGH SEVERITY: CVE-2026-69514 CVSS 7.5 Heap buffer overflow in Windows Remote Desktop Services enables remote code execution by authenticated attackers. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/h112imW6bc...

PT-2026-87540

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use-after-free condition exists in Windows Remote Desktop Services. This occurs when a program continues to use a pointer after it has been freed, which can be...

PT-2026-88318

In the current development version of Eclipse aeriOS, for which no official release has yet been published, the Identity Manager IdM deployment included insecure default configurations and credentials for security-sensitive services. The Helm chart exposed the Keycloak service and its PostgreSQL...