PT-2026-70899

Name of the Vulnerable Software and Affected Versions GMS application versions prior to 9.5.1 Build 9510.1044 Description Insecure handling of serialized objects in a service allows a local attacker to perform unauthorized actions through the affected component. Serialization is the process of...

PT-2026-70410

Name of the Vulnerable Software and Affected Versions AMD Zen affected versions not specified Description An issue in AMD Zen allows an authorized attacker to locally disclose sensitive information, which can affect the system. Recommendations At the moment, there is no information about a newer...

PT-2026-70417

Name of the Vulnerable Software and Affected Versions Microsoft Remote Registry Service affected versions not specified Description A null pointer dereference in the Microsoft Remote Registry Service allows an authorized attacker to cause a denial of service over a network. A null pointer...

PT-2026-70627

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to locally disclose sensitive information, which can affect the system. Recommendations At the moment, there is no information...

PT-2026-70869

Name of the Vulnerable Software and Affected Versions insights-client affected versions not specified Description A flaw exists where the application logs request headers upon receiving a non-200 response. This process may expose the cloud.openshift.com pull-secret token. A local user with access...

PT-2026-70770

Name of the Vulnerable Software and Affected Versions Microsoft PowerShell Core affected versions not specified Description A relative path traversal issue exists in Microsoft PowerShell Core. This flaw allows an unauthorized attacker to execute arbitrary code over a network. Path traversal is a...

PT-2026-70795

TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege guest member of a workspace to obtain a live Google Sheets OAuth access token for that workspace by calling the Google Sheets helper getAccessToken. The vulnerable path checks only whether the caller has read access...

PT-2026-70115

An insecure direct object reference vulnerability in PhotoPrism through commit bb0b933 allows any user with a valid preview token to retrieve the original-resolution cover photo of any album. The AlbumCover handler does not verify that the requesting user is authorized to access the specified alb...

PT-2026-70715

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read exists in Microsoft Office Excel, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds...

PT-2026-70352

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An Incorrect Authorization issue allows for a security feature bypass. An attacker can bypass security measures to obtain unauthorized read and write access,...

PT-2026-70756

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

PT-2026-70741

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Visual Studio Code fails to fail securely, a condition known as failing open, which allows an unauthorized attacker to bypass a security feature over a network. Recommendations At...

PT-2026-70591

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description Inconsistent interpretation of HTTP requests, known as HTTP request/response smuggling, allows an unauthorized attacker to bypass security features over a network. HTTP request smuggling occurs...

PT-2026-70590

Name of the Vulnerable Software and Affected Versions Microsoft QUIC affected versions not specified Description A use after free issue exists in Microsoft QUIC. This occurs when a program continues to use a pointer after it has been freed, which can be leveraged by an unauthorized attacker to...

PT-2026-70751

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally...

PT-2026-70736

Name of the Vulnerable Software and Affected Versions Windows Network File System affected versions not specified Description A buffer over-read in the Windows Network File System allows an unauthorized attacker to cause a denial-of-service condition over a network. A buffer over-read occurs when...

PT-2026-70615

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to locally disclose sensitive information, which can affect the system. Recommendations At the moment, there is no information...

PT-2026-70571

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An out-of-bounds write occurs in .NET, which could allow an unauthorized attacker to execute code locally. An out-of-bounds write is a memory corruption error that happens when a program writes...

PT-2026-70866

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

PT-2026-70322

is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation of this issue does not require user interaction...