212496 matches found
PT-2026-87836
Out-of-bounds write in Windows Spaceport.sys allows an authorized attacker to execute code locally...
PT-2026-87591
Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network...
PT-2026-88145
šØ CVE-2026-84000 Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to execute code locally. š@cveNotify...
PT-2026-88087
The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link...
PT-2026-87039
PX4 Autopilot through 1.17.0 contains a use-after-free vulnerability in the load mon module's stop path where exit and cleanup deletes the LoadMon object and frees the performance counter before perf end attempts to access it. Attackers can trigger this vulnerability by issuing the load mon stop...
PT-2026-87064
XenForo before 2.3.13 contains a cross-site scripting vulnerability in the dynamic redirect handler that allows unauthenticated attackers to execute arbitrary JavaScript in the board origin by crafting a malicious javascript: URI that bypasses host validation. Attackers can embed the board hostna...
PT-2026-87075
A buffer overflow in the SBC DecodeFrames function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier and fixed in v.5.0 allows attackers to cause a Denial of Service DoS via sending a crafted frame...
PT-2026-87102
An Authentication Bypass vulnerability in Sentry before R10.8.2, R10.7.3 and R10.6.4 allows a remote unauthenticated attacker to gain administrative level access...
PT-2026-87036
A flaw was found in hawtio-operator. When deploying Hawtio in cluster mode, the operator creates a cluster-scoped OAuthClient with automatic grant approval GrantMethod: auto and no client secret public client. The redirect URIs are derived from the operator-created Route, whose hostname is...
PT-2026-87058
XenForo before 2.3.13 contains a multi-factor authentication bypass vulnerability in the passkey TFA provider that allows an authenticated attacker to complete login as another user by submitting their own registered passkey credential during the WebAuthn assertion step. The passkey verification...
PT-2026-87094
Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to access already freed memory. This issue affects Valhall GPU Kernel Driver: from r50p0...
PT-2026-87127
Craft CMS versions before 5.10.12 fail to properly cleanse string-typed field-layout elements, allowing authenticated control-panel users to inject Yii2 behavior attachments and event handlers. Attackers can post field-layout tab elements as JSON strings to bypass cleanse validation, then trigger...
PT-2026-86979
A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the file src/main/java/com/github/fge/jackson/JacksonUtils.java. Performing a manipulation results in resource consumption. The attack may be initiated...
PT-2026-87150
A security issue was discovered in MongoDB where an authenticated user with readWrite privileges could crash the mongod server process. By specifying a custom WiredTiger storage configuration option with an incompatible value during collection creation, a user could cause a type confusion in the...
PT-2026-87745
Integer underflow wrap or wraparound in Microsoft Standard XPS allows an unauthorized attacker to execute code over a network...
PT-2026-87702
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network...
PT-2026-88238
In openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-88410
Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue require...
PT-2026-88284
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...
PT-2026-87101
An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request...
PT-2026-88512
Impact The Git node's clone operation matched the destination path against the default N8N BLOCK FILE PATTERNS expression, which was written so that a crafted path caused catastrophic backtracking. Evaluation runs synchronously in the main n8n process, so an authenticated user could freeze the...
PT-2026-88502
Impact A log streaming event destination may reference a generic HTTP credential, and the destination resolved and decrypted whichever credential it named without checking that the caller had access to it. A user holding a custom global role scoped to Log Streaming operations could therefore name...
PT-2026-87378
Double free in Windows Registry allows an authorized attacker to elevate privileges over a network...
PT-2026-87950
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally...
PT-2026-87077
An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote host's identity, and no option was provided to enable it. A man-in-the-middle attacker positioned...
PT-2026-88464
U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of administration credentials over HTTP...
PT-2026-87534
šØ HIGH SEVERITY: CVE-2026-69514 CVSS 7.5 Heap buffer overflow in Windows Remote Desktop Services enables remote code execution by authenticated attackers. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/h112imW6bc...
PT-2026-87554
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...
PT-2026-87173
Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD id tokens during OAuth login. Deployments are affected only when the FAB auth manager is configured with Azure AD as an OAuth provider. Because the signing keys are fetched from Microsoft's...
PT-2026-87671
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
PT-2026-87864
Integer underflow wrap or wraparound in Windows File History Service allows an authorized attacker to elevate privileges locally...
PT-2026-88420
Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...
PT-2026-88120
šØ CVE-2026-83972 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. š@cveNotify...
PT-2026-86949
SAP Process Integration SOAP Adapter allows a privileged user to send specially crafted requests containing deeply nested entity definitions, which under certain conditions could temporarily increase processor load and degrade system responsiveness. Successful exploitation results in low impact o...
PT-2026-86996
Deserialization of untrusted data vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-08, from 11-20 before...
PT-2026-88506
Impact The OAuth Dynamic Client Registration endpoints validated field sizes only for redirect uris, leaving client name and grant types bounded by presence checks alone. An unauthenticated remote caller could submit arbitrarily large values in either field and have them persisted to the database...
PT-2026-87968
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally...
PT-2026-87921
Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...
PT-2026-87045
Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Extractor...
PT-2026-87953
Access of resource using incompatible type 'type confusion' in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
PT-2026-87245
Out-of-bounds read in SQL Server allows an authorized attacker to execute code over a network...
PT-2026-87606
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...
PT-2026-87541
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally...
PT-2026-87784
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network...
PT-2026-87209
New original discovery vuln disclosure: CVE-2026-62801 A malicious PowerShell Remoting endpoint can write arbitrary files anywhere on a connecting user's machine ā escalable to remote code execution. If an attacker can get you to Copy-Item from their endpoint, they own your file system. Affects a...
PT-2026-88262
In stpropnci process std of stpropnci std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87332
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...
PT-2026-87135
Snipe-IT versions before 8.7.0 contain a CSS injection vulnerability in the Custom CSS field due to incomplete sanitization that reverses HTML encoding on greater-than and double-quote characters. Superusers can plant malicious CSS payloads using @import and url references to exfiltrate CSRF toke...