212496 matches found
PT-2026-88396
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-88391
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-88397
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-88389
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-87195
Use after free in Windows Server allows an authorized attacker to elevate privileges locally...
PT-2026-87201
Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...
PT-2026-87581
Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally...
PT-2026-88457
A vulnerability was detected in Open-Web-Analytics up to 1.9.1. The impacted element is the function checkCapabilityAndAuthenticateUser of the file Core/Controller.php of the component Controller. Performing a manipulation results in improper authentication. The attack may be initiated remotely...
PT-2026-88433
The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents...
PT-2026-87589
Integer overflow or wraparound in Microsoft Windows PDF allows an unauthorized attacker to execute code over a network...
PT-2026-87904
🚨 CVE-2026-72994 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-87048
CommServe contained a heap-based buffer overflow issue affecting service availability. Software customers upgrade to resolved maintenance release. Update CommServe...
PT-2026-88461
Silverpeas Core =6.4.6 is vulnerable to Cross Site Scripting XSS in the wysiwyg-CKEditor image upload feature...
PT-2026-87807
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
PT-2026-87407
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
PT-2026-88372
🚨 CVE-2026-75677 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires use...
PT-2026-88152
Impact Instance AI credential setup accepted a credential test/verification URL without checking it matched the workflow node's origin. Exfiltration required the user to actively inject an attacker-controlled URL into the setup flow. The patch derives the credential destination from the node's ow...
PT-2026-87261
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
PT-2026-88138
🚨 CVE-2026-83991 Windows Cloud Files GENERIC WRITE: ACCESS DENIED DeleteFileW: ACCESS DENIED CfCreatePlaceholders with supersede: S OK same file. same token. leaf DACL said no. sync root path did not care. turns a read-only file into a cloud placeholder. writeup + PoC by karollooool:...
PT-2026-87958
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
PT-2026-87622
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
PT-2026-87485
Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally...
PT-2026-88463
In Halo = 2.25.4, the plugin management feature allows users to install/update malicious plugins, which could let attackers execute any command with Halo process permissions...
PT-2026-87565
Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network...
PT-2026-87641
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network...
PT-2026-87376
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
PT-2026-88494
Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access. Exploitation of this issue does not require user interaction. Scope is changed...
PT-2026-87158
A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable...
PT-2026-88668
Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via crafted network traffic. Chromium security severity: Low...
PT-2026-87157
A security issue in MongoDB Server allows an unauthenticated network user to cause a denial of service on a specific type of replica set member. The server contains an assertion in its read concern processing logic that can be reached without authentication, and the assertion's assumptions about...
PT-2026-88493
Acrobat Reader is affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access...
PT-2026-88476
🚨 CVE-2026-81977 Acrobat Reader is affected by an Integer Underflow Wrap or Wraparound vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a...
PT-2026-88492
Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...
PT-2026-87179
A improper neutralization of special elements used in a command 'command injection' vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9 may allow attacker to execute unauthorized code or commands via...
PT-2026-88291
A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger th...
PT-2026-87162
A security issue in MongoDB Server's query statistics serialization on the router allows users with monitoring privileges to access unredacted search query text from other users' operations. An improper conditional check in the serialization logic causes the data redaction mechanism to be bypasse...
PT-2026-88735
UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
PT-2026-87483
Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally...
PT-2026-88311
ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code 'Eval Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of...
PT-2026-87011
A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The input received over a proprietary communication protocol that is exposed when the device is placed into a special firmware-update mode is not properly validated, resulting in a memory corruption condition. This could all...
PT-2026-88126
🚨 CVE-2026-83978 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-87555
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally...
PT-2026-87069
A reflected cross-site scripting XSS vulnerability in the grid datasource.php component of AppNitro MachForm v30 allows attackers to execute arbitrary Javascript in the context of the victim's browser via injecting a crafted payload into the filterfilters0field parameter...
PT-2026-87310
Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
PT-2026-87003
A vulnerability has been identified in Teamcenter V2412 All versions V2412.0013, Teamcenter V2506 All versions V2506.0010, Teamcenter V2512 All versions V2512.2607, Teamcenter V2606 All versions V2606.2607. Affected applications do not properly encode user-supplied input reflected into HTML...
PT-2026-86978
Improper Restriction of Software Interfaces to Hardware Features in ASUS Armoury Crate allows a local user to modify hardware configuration settings and potentially cause hardware damage by bypassing driver authentication and accessing critical model-specific registers.Refer to the ' Security...
PT-2026-88309
ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service condition. Exploitation of this issue does not...
PT-2026-88235
In a2dp vendor opus decoder decode packet of a2dp vendor opus decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...