212496 matches found
PT-2026-87705
Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to execute code over a network...
PT-2026-87221
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
PT-2026-87276
Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network...
PT-2026-87808
Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-87493
Stack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...
PT-2026-87231
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...
PT-2026-87726
🚨 HIGH SEVERITY: CVE-2026-69797 CVSS 8.8 Use-after-free flaw in Microsoft Office PowerPoint enables remote code execution. Network-based attack, no privileges required. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/l8ziCwoJnc...
PT-2026-87720
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-87649
🚨 HIGH SEVERITY: CVE-2026-69678 CVSS 8.8 Use-after-free flaw in Microsoft Office PowerPoint enables remote code execution. Attacker requires user interaction. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/CpB18QSCQG...
PT-2026-87627
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network...
PT-2026-87704
🚨 HIGH SEVERITY: CVE-2026-69767 CVSS 8.8 Use-after-free in MS Office PowerPoint enables remote code execution. Network-based attack, no privileges required. Patch immediately. CVE Vulnerability PatchNow https://t.co/Z8mtFG8Rrb...
PT-2026-88177
There is a lack of XSS escaping in the Spark History Server prior to 3.5.8 which allows a malicious Spark job to generate arbitrary unescaped frontend code which could lead to a minimal privilege escalation in browser. Users are encouraged to upgrade to Spark 3.5.8 or later. This CVE is marked as...
PT-2026-87954
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
PT-2026-87860
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...
PT-2026-87220
Improper privilege management in SQL Server allows an authorized attacker to elevate privileges over a network...
PT-2026-87898
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-87907
🚨 CVE-2026-72997 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-87910
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-87916
🚨 CVE-2026-73007 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-87978
🚨 HIGH SEVERITY: CVE-2026-77904 CVSS 7.8 Heap-based buffer overflow in Windows Volume Manager Extension Driver enables local privilege escalation by authenticated attackers. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/fjuBA7sACZ...
PT-2026-87267
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
PT-2026-87266
Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...
PT-2026-88257
In openLogicalChannel of multiple files, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87192
InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...
PT-2026-88260
In multiple locations, there is a possible memory safety issue due to integer overflow. This could lead to local escalation of privilege with no additional execution privileges required...
PT-2026-87551
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
PT-2026-87832
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally...
PT-2026-87624
Heap-based buffer overflow in Windows HTTP Print Provider allows an authorized attacker to execute code over a network...
PT-2026-87829
Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...
PT-2026-88107
Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network...
PT-2026-87840
Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...
PT-2026-87847
Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally...
PT-2026-87877
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
PT-2026-88020
Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical attack...
PT-2026-88340
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-88147
Authentication bypass by capture-replay in Microsoft Authentication Library MSAL for Node.js allows an unauthorized attacker to perform spoofing over a network...
PT-2026-88323
Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...
PT-2026-88326
Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...
PT-2026-87361
Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally...
PT-2026-88517
A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Image .icns file. The uncompress function, which handles RLE-encoded ICNS icon data, fails to validate the source buffer's boundaries during...
PT-2026-88437
The Okta Access Gateway improperly handles input sanitization and regular expression evaluation within its Protected Rule authorization check, resulting in an authorization bypass when an administrator has explicitly configured a Protected Rule policy on one or more application resources...
PT-2026-87520
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
PT-2026-87721
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...
PT-2026-87611
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally...
PT-2026-87662
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
PT-2026-87716
Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...
PT-2026-87830
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally...
PT-2026-87749
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally...