PT-2026-70751

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally...

PT-2026-70591

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description Inconsistent interpretation of HTTP requests, known as HTTP request/response smuggling, allows an unauthorized attacker to bypass security features over a network. HTTP request smuggling occurs...

PT-2026-70795

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...

PT-2026-70352

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An Incorrect Authorization issue allows for a security feature bypass. An attacker can bypass security measures to obtain unauthorized read and write access,...

PT-2026-70612

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper input validation allows an unauthorized attacker to execute arbitrary code over a network, which can lead to a full system compromise. Recommendations At the...

PT-2026-70115

An insecure direct object reference vulnerability in PhotoPrism through commit bb0b933 allows any user with a valid preview token to retrieve the original-resolution cover photo of any album. The AlbumCover handler does not verify that the requesting user is authorized to access the specified alb...

PT-2026-70741

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Visual Studio Code fails to fail securely, a condition known as failing open, which allows an unauthorized attacker to bypass a security feature over a network. Recommendations At...

PT-2026-70756

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

PT-2026-70715

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read exists in Microsoft Office Excel, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds...

PT-2026-70590

Name of the Vulnerable Software and Affected Versions Microsoft QUIC affected versions not specified Description A use after free issue exists in Microsoft QUIC. This occurs when a program continues to use a pointer after it has been freed, which can be leveraged by an unauthorized attacker to...

PT-2026-70661

Name of the Vulnerable Software and Affected Versions Visual Studio Code CoPilot Chat Extension affected versions not specified Description An unauthorized attacker can bypass a security feature over a network within the Visual Studio Code CoPilot Chat Extension. Recommendations At the moment,...

PT-2026-70032

Name of the Vulnerable Software and Affected Versions SAP NetWeaver and ABAP Platform affected versions not specified Description In the Change and Transport System - Customer Transport Integration Wizard, a low-privileged user can modify configuration tables that control access to data objects...

PT-2026-70571

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An out-of-bounds write occurs in .NET, which could allow an unauthorized attacker to execute code locally. An out-of-bounds write is a memory corruption error that happens when a program writes...

PT-2026-70322

is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction...

PT-2026-70866

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

PT-2026-70615

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to locally disclose sensitive information, which can affect the system. Recommendations At the moment, there is no information...

PT-2026-70495

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A race condition occurs in the Windows Telephony Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileg...

PT-2026-70396

Name of the Vulnerable Software and Affected Versions Microsoft PowerShell Core affected versions not specified Description Server-side request forgery SSRF allows an unauthorized attacker to disclose information over a network. SSRF is a flaw where an attacker can induce the server-side...

PT-2026-70370

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Improper neutralization of special elements used in a command, known as command injection, allows an unauthorized attacker to disclose information over a network. Recommendations A...

CVE-2026-72906

CVE-2026-72906 details (NORMAL): ERPNext (open-source ERP) contains a permission validation issue in the send_auto_email function within erpnext/accounts/doctype/process_statement_of_accounts/process_statement_of_accounts.py. The root cause is the absence of a Process Statement Of Accounts permis...