PT-2026-70663

Name of the Vulnerable Software and Affected Versions Windows iSCSI Target Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows iSCSI Target Service. This issue allows an unauthorized remote attacker to execute arbitrary code over a network,...

PT-2026-70477

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows DHCP Server, which allows an unauthorized attacker to disclose sensitive information over an adjacent network...

PT-2026-70727

Name of the Vulnerable Software and Affected Versions Microsoft Office PowerPoint affected versions not specified Description Incomplete cleanup in the software allows an unauthorized attacker to disclose sensitive information locally, which can affect the system. Recommendations At the moment,...

PT-2026-70847

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper...

PT-2026-70870

Name of the Vulnerable Software and Affected Versions insights-client affected versions not specified Description A flaw exists where a compromised managed cluster, known as a spoke, can inject unencoded data into the Insights API URL path. This happens because the ClusterID variable, which is...

PT-2026-70404

Name of the Vulnerable Software and Affected Versions Microsoft High Performance Computing HPC Pack affected versions not specified Description An issue exists where the software performs deserialization of untrusted data. This allows an unauthorized attacker to execute arbitrary code over a...

PT-2026-70706

Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

PT-2026-70632

Access of resource using incompatible type 'type confusion' in Microsoft Office allows an unauthorized attacker to execute code locally...

PT-2026-70650

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

PT-2026-70230

Name of the Vulnerable Software and Affected Versions NETGEAR affected versions not specified Description Insufficient input validation allows authenticated administrators connected to the local network to make unauthorized modifications to the device software and functionality. Recommendations A...

PT-2026-70679

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An out-of-bounds read in Windows NTFS allows an authorized attacker to disclose sensitive information locally, which can affect the system. Recommendations At the moment, there is no...

PT-2026-70854

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges. This could result in exposure of collection metadata and, on certain deployment configurations,...

PT-2026-70417

Name of the Vulnerable Software and Affected Versions Microsoft Remote Registry Service affected versions not specified Description A null pointer dereference in the Microsoft Remote Registry Service allows an authorized attacker to cause a denial of service over a network. A null pointer...

PT-2026-70627

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to locally disclose sensitive information, which can affect the system. Recommendations At the moment, there is no information...

PT-2026-70700

Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 on-premises allows an authorized attacker to disclose information over a network...

PT-2026-70760

Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally...

PT-2026-70765

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is no information about a newer...

PT-2026-70217

Name of the Vulnerable Software and Affected Versions Velociraptor affected versions not specified Description The gRPC API contains a flaw in the 'VFSGetBuffer' endpoint used for reading files from the datastore. The system employs a prefix check against a list of denied prefixes to prevent...

PT-2026-70389

Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally...

PT-2026-70899

Name of the Vulnerable Software and Affected Versions GMS application versions prior to 9.5.1 Build 9510.1044 Description Insecure handling of serialized objects in a service allows a local attacker to perform unauthorized actions through the affected component. Serialization is the process of...