212496 matches found
PT-2026-87258
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
PT-2026-87325
Stack-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
PT-2026-87580
Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally...
PT-2026-87371
Out-of-bounds read in BranchCache allows an unauthorized attacker to deny service over a network...
PT-2026-87631
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally...
PT-2026-87384
Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally...
PT-2026-88222
In multiple functions of RangingServiceImpl.java, there is a possible MITM due to a missing permission check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-88232
In multiple functions of LocalImageResolver.java, there is a possible Remote Persistent Denial of Service due to a DNG image rendering check bypass. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87304
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...
PT-2026-87307
Use after free in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges over a network...
PT-2026-87639
Use after free in Windows Message Queuing allows an authorized attacker to elevate privileges locally...
PT-2026-88249
In multiple functions, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87399
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...
PT-2026-87460
Heap-based buffer overflow in Windows IKE Extension allows an authorized attacker to execute code over a network...
PT-2026-87852
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
PT-2026-88423
Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...
PT-2026-88555
Use after free in Aura in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88180
A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function mysqli connect of the file config/database.php of the component Database Connection. This manipulation causes hard-coded credentials. The...
PT-2026-88526
Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. This issue affects Citrix Workspace app for Windows: before 2603.11 Current Release CR, before 2507.1 LTSR CU3, and before LTSR 2607...
PT-2026-87857
Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network...
PT-2026-88736
Type confusion in XML in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
PT-2026-87010
A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The device firmware contains binaries from which debugging symbols have not been removed. This could allow an unauthenticated attacker with access to the publicly available firmware update files to more easily reverse engine...
PT-2026-88628
Type confusion in Rust in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
PT-2026-87425
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
PT-2026-88121
šØ CVE-2026-83973 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. š@cveNotify...
PT-2026-88640
Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88642
Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-88629
Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88601
UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88653
Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88213
In multiple functions of NfcService.java, there is a possible silent payment session hijacking enablement due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87345
CVE-2026-69298 scores 7.8. Integer overflow in Windows Biometric Service lets authorized local attackers gain SYSTEM privileges. Exploitation unlikely; no public disclosure or in-the-wild use yet. Patch now for Windows 10 1607 and others. https://t.co/Vsem3XKkvS https://t.co/Pahr2IXjiN...
PT-2026-88261
In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87196
Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally...
PT-2026-87932
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
PT-2026-88542
Confused deputy in Prerender in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
PT-2026-87891
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...
PT-2026-87870
Use after free in Windows Deployment Services allows an authorized attacker to execute code over a network...
PT-2026-88342
Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...
PT-2026-87925
Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
PT-2026-87412
Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network...
PT-2026-87222
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
PT-2026-87400
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
PT-2026-88347
šØ CVE-2026-75635 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires use...
PT-2026-88245
In rw mfc handle read op of rw mfc.cc, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-88345
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-87625
Incomplete list of disallowed inputs in Active Directory Certificate Services AD CS allows an authorized attacker to perform tampering over a network...
PT-2026-87957
Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
PT-2026-88352
šØ CVE-2026-75642 Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the pa...