PT-2026-112320

Name of the Vulnerable Software and Affected Versions Windows Active Directory Domain Services versions prior to 14393.9612 for Windows Server 2016 Windows Active Directory Domain Services versions prior to 17763.9376 for Windows Server 2019 Windows Active Directory Domain Services versions prior...

Microsoft Windows: CVE-2026-69919: Windows Cryptographic Services Information Disclosure Vulnerability

Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

PT-2026-111642

Name of the Vulnerable Software and Affected Versions Heym versions prior to 0.0.40 Description An authenticated user with permissions to create or edit a workflow using an Agent custom Python tool can bypass the blacklist-based sandbox located in backend/app/services/python tool executor.py. Thi...

CVE-2026-55376: Improper Neutralization of Special Elements used in an OS Command

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/pythontoolexecutor.py becau...

CVE-2026-69992: Use After Free

Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...

UBUNTU-CVE-2026-96222

Improper certificate validation in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...

PT-2026-112763

Name of the Vulnerable Software and Affected Versions Windows Text Services Framework affected versions not specified Description A use-after-free condition exists in the Windows Text Services Framework. This allows an authorized attacker to elevate privileges locally on the system. Use-after-fre...

CVE-2026-97830: Double Free

Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network...

PT-2026-112105

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description An out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment, there is...

Microsoft Windows: CVE-2026-83666: Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

CVE-2026-83647: Out-of-bounds Read

Out-of-bounds read in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...

CVE-2026-83666: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

CVE-2026-69919: Out-of-bounds Read

Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85795: Windows Text Services Framework Elevation of Privilege Vulnerability

Use after free in Windows Text Services Framework allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70014: Windows Cryptographic Services Remote Code Execution Vulnerability

Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70229: Windows Active Directory Domain Services Remote Code Execution Vulnerability

Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70005: Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-112155

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description Weak authentication allows an unauthorized attacker to bypass a security feature over a network, which can lead to an impact on the system. Recommendations At the...

PT-2026-112184

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information...

Microsoft Windows: CVE-2026-83511: Active Directory Federation Services (AD FS) Spoofing Vulnerability

Weak authentication in Active Directory Federation Services AD FS allows an unauthorized attacker to perform spoofing over a network...