PT-2026-2756

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An integer underflow condition exists in Microsoft Office Excel that could allow an unauthorized attacker to execute code locally. The issue is due to an integer underflow, als...

PT-2026-2745

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An out-of-bounds read issue exists in Microsoft Office Word, potentially allowing an unauthorized attacker to execute code locally. Recommendations At the moment, there is no...

PT-2026-2752

Name of the Vulnerable Software and Affected Versions Microsoft Office and Microsoft 365 Apps for Enterprise affected versions not specified Description A use-after-free condition exists in Microsoft Office and Microsoft 365 Apps for Enterprise. Exploitation of this issue could allow an attacker ...

PT-2026-2753

🟠 CVE-2026-20953 - High Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. https://t.co/3HYe8zgm3r https://t.co/TZ3AHieY4d...

PT-2026-2699

CVE-2026-20853 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows WalletService allows an unauthorized attacker to elevate privil… https://t.co/1I7UilLbTk...

PT-2026-2748

CVE-2026-20948 Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. https://t.co/RWIO4Ijxeo...

PT-2026-2693

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A flaw exists in the Windows Clipboard Server that could allow an attacker to gain higher-level access to a system. This issue involves a use-after-free condition. An attacker could exploit...

PT-2026-2698

Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A flaw in Windows Hello’s privilege assignment allows a local attacker to perform tampering on the system. This issue could allow unauthorized access and manipulation of the system...

PT-2026-2668

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description The Windows Kernel has a flaw where sensitive information is being written into log files. This allows a local attacker to potentially disclose information. The issue allows attackers ...

CVE-2021-33663

SAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83,7.84, allows an unauthorized attacker to insert cleartext commands due to improper...

CVE-2022-42280

NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path traversal, which may lead to authentication bypass...

CVE-2025-64675

Improper neutralization of input during web page generation 'cross-site scripting' in Azure Cosmos DB allows an unauthorized attacker to perform spoofing over a network...

Microsoft Partner Center 授权问题漏洞

Microsoft Partner Center is an online platform from Microsoft Corporation USA. An authorization issue vulnerability exists in Microsoft Partner Center that stems from improper authorization and could allow an unauthorized attacker to elevate privileges over the network...

CVE-2025-64671

Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to execute code locally...

CVE-2025-62557

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2025-62555

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...

CVE-2024-2105

An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices...

CVE-2024-2105 JBL: Improper validation of ICM field in connection requests

An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices...

PT-2025-50324

An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices...

CVE-2025-64667

User interface ui misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...