212496 matches found
PT-2026-87333
Out-of-bounds read in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to disclose information locally...
PT-2026-87210
External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally...
PT-2026-87435
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
PT-2026-87372
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
PT-2026-87411
Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
PT-2026-87421
External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally...
PT-2026-87552
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
PT-2026-88264
In kvm iommu map sg of iommu.c, there is a possible use after free due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87388
Heap-based buffer overflow in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally...
PT-2026-88577
Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...
PT-2026-87562
Missing authorization in Windows Hyper-V allows an authorized attacker to elevate privileges over a network...
PT-2026-87418
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
PT-2026-88442
The Okta Privileged Access client URL handler does not insert an option terminator before appending the target value to the command-line arguments. When a scaleft:// protocol handler link contains a value beginning with a hyphen, the underlying CLI framework interprets it as a command-line flag,...
PT-2026-88343
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-87979
🚨 HIGH: CVE-2026-77905 | CVSS 7.0 Use-after-free in Windows Management Instrumentation enables local privilege escalation. Authorized attackers can exploit this vulnerability. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/9yVWduy1HW...
PT-2026-87975
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...
PT-2026-88287
Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network...
PT-2026-87414
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
PT-2026-87181
A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via...
PT-2026-88108
Missing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally...
PT-2026-88267
In multiple functions of iommu.c, there is a possible out of bounds read/write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87984
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
PT-2026-87612
Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally...
PT-2026-87922
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
PT-2026-88255
In AppendCommentLine of AnnotationProcessor.cpp, there is a possible supply chain risk due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87291
Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network...
PT-2026-88687
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-88247
In maybeRemoveInvalidInstallerPackageName of InstallRepository.kt, there is a possible unauthorized app update due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87986
Out-of-bounds read in Windows OLE DB allows an unauthorized attacker to disclose information over a network...
PT-2026-87675
Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network...
PT-2026-87670
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...
PT-2026-88681
Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-88755
Clickjacking in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
PT-2026-87143
Movie Recommend v1.0.0 was discovered to contain a SQL injection vulnerability in the sort parameter at /loadingmore. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...
PT-2026-88527
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. An app may be able to gain root privileges...
PT-2026-88691
Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...
PT-2026-88701
Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
PT-2026-87082
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects...
PT-2026-87348
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network...
PT-2026-87308
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...
PT-2026-88486
Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-88456
The Auth0 AD/LDAP Connector improperly processes a configuration value during service startup. This allows a low-privileged user on the host system to modify the connector's configuration. When the service restarts, the modified configuration can lead to code execution with the privileges of the...
PT-2026-88485
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-88153
A vulnerability was detected in aircheng-org iWebShop-5 up to 5.15. This affects the function Login of the file controllers/systemseller.php. Performing a manipulation of the argument Name results in improper authentication. It is possible to initiate the attack remotely. The exploit is now publi...
PT-2026-88489
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-88490
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-88711
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88539
Information leak in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88719
Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
PT-2026-88753
UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...