212496 matches found
PT-2026-87313
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
PT-2026-87433
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network...
PT-2026-88520
A flaw was found in DPDK lib/vhost. Missing length validation before reading command data in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...
PT-2026-87053
A client may issue HTTP/2 requests to a Jetty server that result in blocking writes that are never unblocked, eventually causing all threads to be blocked and the whole server to become unresponsive. This is caused by a race condition in the server when handling RST STREAM frames and GOAWAY frame...
PT-2026-87151
A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...
PT-2026-87834
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
PT-2026-87365
Missing authentication for critical function in Windows Power Dependency Coordinator allows an authorized attacker to perform tampering locally...
PT-2026-87939
Photoshop Mobile is affected by a Session Fixation vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain access to sensitive resources. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user...
PT-2026-87710
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...
PT-2026-87131
Snipe-IT before 8.7.1 fails to validate the length of the note field in the POST /account/accept/acceptance endpoint, allowing authenticated users to submit unbounded input that reaches synchronous CommonMark rendering. Attackers can submit large note values to exhaust PHP worker CPU and cause...
PT-2026-87409
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network...
PT-2026-87063
XenForo before 2.3.13 contains a missing authorization vulnerability in the force-agreement controller that allows any ACP administrator to access and submit force-agreement forms regardless of their assigned permissions. Attackers can bypass the option permission declared in the navigation...
PT-2026-87713
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network...
PT-2026-86953
SAP Integration Suite does not sufficiently validate XML documents accepted from untrusted sources in certain internal components. An attacker with low privileges could submit specially crafted XML payloads containing malicious external entity declarations. Successful exploitation could allow the...
PT-2026-87980
🚨 CVE-2026-77906 Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network. 🎖@cveNotify...
PT-2026-87389
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally...
PT-2026-87468
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...
PT-2026-87795
Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...
PT-2026-88063
Not failing securely 'failing open' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-87080
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to sensitive kernel...
PT-2026-87948
Integer underflow wrap or wraparound in SQL Server allows an authorized attacker to disclose information locally...
PT-2026-87593
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
PT-2026-87947
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
PT-2026-87512
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an unauthorized attacker to elevate privileges with a physical attack...
PT-2026-88215
In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87351
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...
PT-2026-87362
Out-of-bounds read in Remote Desktop Client allows an authorized attacker to disclose information over a network...
PT-2026-88018
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
PT-2026-87284
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
PT-2026-87573
Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally...
PT-2026-86954
SAP S/4HANA Finance Advanced Payment Management does not perform sufficient Cross-Site Request Forgery protection on certain requests due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be trigger...
PT-2026-87478
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
PT-2026-86951
SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated user to send a specially crafted packet that triggers reprocessing of a previously buffered user request, potentially hijacking another user's session under narrow timing conditions. Successful exploitation coul...
PT-2026-87340
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-87607
Use after free in Microsoft Install Service allows an authorized attacker to elevate privileges locally...
PT-2026-87830
Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally...
PT-2026-88449
The react-native-auth0 SDK's web platform implementation does not scope its in-memory token cache to individual user sessions when operating in a server-side rendering SSR environment where module state persists across HTTP requests. Under the listed preconditions, tokens cached in module memory...
PT-2026-87788
Missing release of memory after effective lifetime in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
PT-2026-88274
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to availability...
PT-2026-87068
fastify-cli starts the Node.js Inspector when a debug flag is used, but it ignores the explicit bind address the user supplies and binds the Inspector to a broadly reachable address instead of the intended loopback. As a result the debugging interface can be exposed beyond the local machine, and...
PT-2026-87872
Heap-based buffer overflow in Windows Deployment Services allows an authorized attacker to execute code locally...
PT-2026-87686
🚨Critical - Windows DNS Server Remote Code Execution via Use-After-Free CVE-2026-69730 A use-after-free in the Windows DNS Server service DNS.exe can be triggered remotely by sending crafted DNS requests over the network, corrupting memory and leading to arbitrary code execution as SYSTEM...
PT-2026-87640
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...
PT-2026-87851
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network...
PT-2026-88038
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
PT-2026-87799
Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network...
PT-2026-88528
Koha Eval Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Koha. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP por...
PT-2026-87911
🚨 CVE-2026-73002 Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...