PT-2026-70660

Name of the Vulnerable Software and Affected Versions Entra Connect affected versions not specified Description An elevation of privilege issue exists in Entra Connect, which could allow an attacker to gain higher-level permissions than intended. Recommendations At the moment, there is no...

PT-2026-70718

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70577

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is no...

PT-2026-70588

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A heap-based buffer overflow in the Windows DWM Core Library allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program...

PT-2026-70051

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server ABAP affected versions not specified Description An authenticated attacker can generate and distribute a malicious link. When an authenticated victim accesses this link, injected input is processed and reflecte...

PT-2026-70319

Improper input validation for some IntelR Neural Compressor software before version v3.7 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This...

PT-2026-70165

n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level credentials and not for credentials referenced inside an Execute Sub-workflow node's inline workflow JSON. A member with Editor access to a shared workflow when workflow sharing is enabled who knows a...

PT-2026-70459

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A heap-based buffer overflow occurs in Windows Remote Desktop Services, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow...

PT-2026-70089

Name of the Vulnerable Software and Affected Versions JBoss marshalling affected versions not specified Description A flaw exists in the Infinispan session replication path where replicated session data is deserialized using the JBoss Marshalling River unmarshaller without class filtering. This...

PT-2026-70133

Name of the Vulnerable Software and Affected Versions CiviCRM versions prior to 6.18.alpha1 Description An SQL injection issue exists where the contact search RLIKE clause concatenates user-supplied values into a SQL query without proper sanitization. This allows authenticated users with...

PT-2026-70286

Name of the Vulnerable Software and Affected Versions IntelR Active Management Technology IntelR AMT affected versions not specified IntelR Standard Manageability affected versions not specified Description Improper initialization in the firmware may allow an information disclosure. A system...

PT-2026-70276

Name of the Vulnerable Software and Affected Versions IntelR Data Center Attestation Primitives IntelR DCAP affected versions not specified Description A protection mechanism failure may allow an unprivileged software adversary with an unauthenticated user to enable data exposure. This issue can ...

PT-2026-70756

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally...

PT-2026-70323

Protection mechanism failure for some IntelR LLM Library for PyTorch within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...

PT-2026-70938

Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0, Kestra's core/src/main/java/io/kestra/core/runners/pebble/functions/HttpFunction.java passes the user-controlled http uri argument to URI.create and the server-side HTTP client without restricting private, loopback, or...

PT-2026-70859

An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be able to modify. This is due to an internal-use aggregation stage being reachable by external clients without an...

PT-2026-70188

A vulnerability has been identified in LOGO! Soft Comfort All versions V9. The project password feature in the affected products stores the password as an unsalted SHA-256 hash. This could allow an attacker who has obtained the project file to perform efficient offline dictionary or brute-force...

PT-2026-70855

An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by submitting a specially formed query against a collection with a text index. This could result in a denial of service, affecting connecte...

PT-2026-70241

A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding. The issue occurs because the parser uses a single internal variable to store both the remaining chunk size and state flags. By sending a specially...

PT-2026-70909

Name of the Vulnerable Software and Affected Versions SonicWall Email Security affected versions not specified Description An improper control of code generation allows an authenticated attacker with access to the restricted CLI to perform a local privilege escalation. By injecting arbitrary OS...

PT-2026-70499

Name of the Vulnerable Software and Affected Versions Windows Management Instrumentation affected versions not specified Description An out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose sensitive information locally and affect the system. An...

PT-2026-70449

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A heap-based buffer overflow occurs in the Windows Kernel, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue...

PT-2026-70445

Name of the Vulnerable Software and Affected Versions Windows USB Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows USB Driver, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruptio...

PT-2026-70358

Activepieces is an open source AI workflow automation platform. Prior to 0.83.0, the /api/redirect OAuth callback endpoint embeds the user-supplied code query parameter directly into an inline script block without proper escaping. A crafted request to /api/redirect with a malicious code value can...

PT-2026-70333

Uncontrolled search path for some EquiTriton before version f5ddbb5 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially...

PT-2026-70752

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...

PT-2026-70315

Name of the Vulnerable Software and Affected Versions IntelR XeonR processors affected versions not specified Description Improper access control in the firmware for the Alias Checking Trusted Module may allow an escalation of privilege. An adversary with access to startup code and System...

PT-2026-70059

Name of the Vulnerable Software and Affected Versions Zephyr ARM port affected versions not specified Description On the ARM port, enabling the hardware FPU via CONFIG FPU forces a Floating point ABI choice, defaulting to CONFIG FP HARDABI. Both FP HARDABI and FP SOFTABI allow the compiler to emi...

PT-2026-70453

Name of the Vulnerable Software and Affected Versions Windows Defender Firewall Service affected versions not specified Description Missing authorization in the Windows Defender Firewall Service allows an authorized attacker to locally bypass a security feature, which can affect the system...

PT-2026-70733

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70915

Name of the Vulnerable Software and Affected Versions TypeBot versions prior to 3.16.0 Description The OpenAI Create Transcription action handler uses the fetch function to retrieve a user-supplied audio URL without implementing existing Server-Side Request Forgery SSRF protections. SSRF is a fla...

PT-2026-70517

Name of the Vulnerable Software and Affected Versions Windows Remote Access Connection Manager affected versions not specified Description A heap-based buffer overflow occurs in the Windows Remote Access Connection Manager. This issue allows an authorized attacker to elevate privileges locally on...

PT-2026-70722

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A numeric truncation error allows an unauthorized attacker to execute arbitrary code locally or remotely, potentially affecting the system. Recommendations At the moment, there...

PT-2026-70708

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to locally disclose sensitive information, which can affect the system. Recommendations At the moment, there is no information...

PT-2026-70725

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized...

PT-2026-70715

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read exists in Microsoft Office Excel, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds...

PT-2026-70542

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description A stack-based buffer overflow in Windows TCP/IP allows an unauthorized remote attacker to execute arbitrary code over a network, potentially compromising the system. Recommendations At...

PT-2026-70713

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

PT-2026-70429

Name of the Vulnerable Software and Affected Versions Windows Accessibility Infrastructure ATBroker.exe affected versions not specified Description Improper link resolution before file access, also known as link following, in the Windows Accessibility Infrastructure ATBroker.exe allows an...

PT-2026-70537

Name of the Vulnerable Software and Affected Versions Windows LDAP affected versions not specified Description A heap-based buffer overflow in the Lightweight Directory Access Protocol LDAP allows an unauthorized attacker to execute arbitrary code over a network, potentially compromising the...

PT-2026-70538

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description An out-of-bounds read in Windows Win32K allows an authorized attacker to disclose sensitive information locally, which may affect the system. Recommendations At the moment, there is no...

PT-2026-70533

Name of the Vulnerable Software and Affected Versions RPC Runtime affected versions not specified Description A heap-based buffer overflow in the RPC Runtime allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs...

PT-2026-70093

Name of the Vulnerable Software and Affected Versions JBoss EAP affected versions not specified Description A flaw in jboss-remoting allows a remote unauthenticated attacker to cause Out of Memory OOM errors by completing an Upgrade: jboss-remoting handshake. This occurs when the attacker can rea...

PT-2026-70607

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to execute arbitrary code locally and remotely, which can affect the system. An out-of-bounds read occurs when a program reads...

PT-2026-70633

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description A buffer over-read allows an unauthorized attacker to execute arbitrary code locally and remotely, which can affect the system. A buffer over-read occurs when a program reads mo...

PT-2026-70605

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an unauthorized attacker...

PT-2026-70019

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server ABAP affected versions not specified Description An unauthenticated attacker can exploit logical errors in the parsing of the DIAG protocol, which is a proprietary SAP protocol used for communication between th...

PT-2026-70762

Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description Improper input validation in Microsoft Office PowerPoint allows...

PT-2026-70741

Name of the Vulnerable Software and Affected Versions Visual Studio Code affected versions not specified Description Visual Studio Code fails to fail securely, a condition known as failing open, which allows an unauthorized attacker to bypass a security feature over a network. Recommendations At...

PT-2026-70747

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An out-of-bounds read exists in Microsoft Office Word, which allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds re...