Microsoft Windows: CVE-2026-70048: Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85821: Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

PT-2026-112579

Name of the Vulnerable Software and Affected Versions Windows COM+ Event System Service affected versions not specified Description A use-after-free condition in the Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruptio...

CVE-2026-108973: Unrestricted Upload of File with Dangerous Type

A vulnerability was determined in SourceCodester Contact Tracing System 1.0. Affected by this issue is the function moveuploadedfile of the file /classes/Users.php?f=save. This manipulation of the argument img/id causes unrestricted upload. The attack can be initiated remotely. The exploit has be...

PT-2026-111293

Name of the Vulnerable Software and Affected Versions SourceCodester E-Learning System version 1.0 Description An unrestricted file upload issue exists in the save users function within the /classes/Users.php?f=save endpoint. A remote attacker can exploit this by manipulating the img argument to...

PT-2026-111623

Name of the Vulnerable Software and Affected Versions girishsaraf Online-Appointment-Booking-System versions up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5 Description An issue exists in the Admin CRUD Endpoint within the file Admin/deleteclinic.php. Manipulation of the cid/did arguments allows f...

CVE-2026-83784: Absolute Path Traversal

Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges over a network...

PT-2026-112414

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A use-after-free condition in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges...

PT-2026-111327

Name of the Vulnerable Software and Affected Versions AdithyaYelloju Restaurant-Management-System affected versions not specified Description An authorization bypass exists in the Order Management component. A remote attacker can manipulate the ID argument within the mysqli query function to bypa...

ROS-20261013-73-0446

The vulnerability in the kernel-lt is related to the lack of checks for division by zero. Exploiting this vulnerability can allow an attacker to cause a system failure...

PT-2026-111997

Name of the Vulnerable Software and Affected Versions Windows Distributed File System DFS affected versions not specified Description An untrusted pointer dereference in Windows Distributed File System DFS allows an unauthorized attacker to elevate privileges over a network. Recommendations At th...

Microsoft Windows: CVE-2026-85798: Windows Distributed File System (DFS) Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...

CVE-2026-96857: Files or Directories Accessible to External Parties

Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally...

PT-2026-111283

Name of the Vulnerable Software and Affected Versions itsmeravitejak Online-Examination-System versions up to e6208e630b14657999bbfe4c9912302d2a1e2449 Description A remote SQL injection is possible within the Registration Form component. The issue exists in the MySQLDB::addNewUser function locate...

CVE-2026-96244: Use After Free

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally...

PT-2026-113139

Name of the Vulnerable Software and Affected Versions Windows COM+ Event System Service affected versions not specified Description An untrusted pointer dereference in the Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

PT-2026-112206

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description Improper access control in the Windows Projected File System allows an authorized attacker to locally disclose sensitive information, which can affect the system...

PT-2026-111915

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Universal Disk Format File System Driver UDFS. This issue allows an authorized attacker to...

PT-2026-112425

Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description A buffer over-read in the Windows Encrypting File System EFS allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment,...

CVE-2026-19936: Concurrent Execution using Shared Resource with Improper Synchronization

The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayablemsg.c shares three intrusive lists busyctx, freectx, freechunks and one kworkdelayable between two cooperative threads with no synchronization: btmeshdelayablemsgmanage runs on the Bluetooth host RX thread,...