PT-2026-87963

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

PT-2026-87988

🚨 HIGH: CVE-2026-78444 CVSS 8.1 Untrusted pointer dereference in Windows Failover Cluster enables remote code execution over network. No authentication required. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/JlgAg4R9uL...

CVE-2026-72982: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network...

CVE-2026-72973: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

PT-2026-87972

Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...

CVE-2026-67378: Untrusted Pointer Dereference

Untrusted pointer dereference in SQL Server allows an unauthorized attacker to execute code over a network...

CVE-2026-69546: Use After Free

Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...

PT-2026-88055

Name of the Vulnerable Software and Affected Versions Microsoft Windows Codecs Library affected versions not specified Description A heap-based buffer overflow exists in the Microsoft Windows Codecs Library. This issue allows an unauthorized attacker to execute code locally. Successful exploitati...

PT-2026-87416

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to cause a denial of service over a network. Uncontrolled recursion occurs when a functio...

PT-2026-83264

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description An origin validation error allows an unauthorized attacker to bypass a security feature over a network. Origin validation is a security mechanism used to verify that a...

.NET: .NET Core: .NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

dotnet: .NET Core: Denial of Service via type confusion

A flaw was found in .NET Core. This vulnerability, known as type confusion, allows an unauthorized remote attacker to cause a denial of service DoS over a network. By exploiting this flaw, an attacker can make the affected system unavailable to legitimate users...

.NET: .NET Core: .NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

.NET: .NET Core: .NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

.NET: .NET Core: .NET Security Feature Bypass Vulnerability

Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...

dotnet: .NET Framework: Denial of Service via improper input validation

A flaw was found in .NET Framework. This improper validation of input allows an unauthorized attacker to remotely deny service over a network. This vulnerability can lead to a Denial of Service DoS condition, making the affected system unavailable to legitimate users...

dotnet: .NET Framework: Local Code Execution via Protection Mechanism Failure

A flaw was found in .NET Framework. This protection mechanism failure allows an unauthorized attacker to execute arbitrary code locally. Successful exploitation of this vulnerability can lead to a complete compromise of the affected system...

CVE-2026-70105

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

CVE-2026-69836

CVE-2026-69836 is a CVSS 10.0 (Critical) deserialization of untrusted data vulnerability in Microsoft Entra ID (formerly Azure Active Directory), enabling an unauthorized attacker to achieve remote code execution over a network with no privileges or user interaction required. The vulnerability wa...

Azure Logic Apps Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...