212496 matches found
PT-2026-88642
Use after free in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-87286
Out-of-bounds read in Windows Bluetooth Port Driver allows an authorized attacker to disclose information locally...
PT-2026-88745
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88114
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-87045
Content Extractor contained a deserialization of untrusted data issue affecting privilege management. Software customers upgrade to resolved maintenance release. Update Content Extractor...
PT-2026-88331
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-86947
Detailed: • OpenAI claims an internal model solved the Navier-Stokes Millennium Prize problem after 10,000 agents ran for 88 hours, triggering a dispute with researchers over priority. • Mistral raised €3 billion at a valuation above €21 billion, the largest European tech equity round, to expand...
PT-2026-87734
Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally...
PT-2026-89113
These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.4-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-89112
🚨NextJS, Sharp and ImagicMagick affected by Critical libheif vulnerability 🚨 A heap buffer overflow CVE-2026-84383 in libheif along with 10 other vulnerabilities has been reported to result in RCE when parsing malformed HEIC/HEIF/AVIF images. Popular web tools parsing AVIFS like @nextjs and sharp...
PT-2026-87158
A security issue in the MongoDB Server's storage engine integration layer allows an authenticated user with collection creation privileges to cause a persistent denial of service. Insufficient validation of user-supplied storage configuration options permits values that, once persisted to durable...
PT-2026-87542
Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally...
PT-2026-87426
Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...
PT-2026-87707
Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally...
PT-2026-87684
🚨 CVE-2026-69727 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. 🎖@cveNotify...
PT-2026-87878
Use after free in Windows Modern Execution Server allows an authorized attacker to elevate privileges locally...
PT-2026-87390
Use of uninitialized resource in Windows Management Instrumentation allows an authorized attacker to disclose information over a network...
PT-2026-87652
🚨 HIGH SEVERITY: CVE-2026-69681 CVSS 8.0 Heap buffer overflow in Virtual Hard Disk VHD Miniport Driver enables privilege escalation via network. Authorized attacker required. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/QbIbJXhzbo...
PT-2026-88291
A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger th...
PT-2026-88052
Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally...
PT-2026-87536
Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally...
PT-2026-87166
MongoDB Server contains an incorrect authorization vulnerability in the aggregation framework. An authenticated user with minimal privileges can craft a specially formatted aggregation request that causes the server's authorization subsystem to evaluate a different operation than what is actually...
PT-2026-87147
A security issue exists in MongoDB server's JSON Pointer parser used during $jsonSchema query filter processing. When a find command includes a specially crafted $jsonSchema filter field, the parser processes the input without enforcing adequate limits on iteration count or total allocation size,...
PT-2026-88476
🚨 CVE-2026-81977 Acrobat Reader is affected by an Integer Underflow Wrap or Wraparound vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a...
PT-2026-87937
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
PT-2026-88028
Out-of-bounds write in Microsoft Office allows an unauthorized attacker to execute code over a network...
PT-2026-87891
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...
PT-2026-87055
XenForo before 2.3.13 contains an authorization flaw in the OAuth2 token endpoint that allows attackers controlling any allowlisted redirect URI to bypass redirect URI binding by submitting a different allowlisted URI than the one recorded at authorization time. Attackers can exchange an...
PT-2026-88494
Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access. Exploitation of this issue does not require user interaction. Scope is changed...
PT-2026-87835
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally...
PT-2026-87670
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...
PT-2026-88679
Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88719
Observable discrepancy in Prefetch in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
PT-2026-88575
Missing authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88554
Information leak in Enterprise in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88574
Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-88653
Improper input validation in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88725
Use after free in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted Chrome extension. Chromium security severity: Medium...
PT-2026-88650
Improper encoding or escaping of output in CSS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88731
Missing authorization in DOM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Low...
PT-2026-88601
UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88529
Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
PT-2026-88714
Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
PT-2026-88640
Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
PT-2026-87952
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
PT-2026-87425
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
PT-2026-88428
The Okta Access Gateway does not apply its Lua directive restriction to the application-level custom configuration field. The field is interpolated directly into the nginx server block without inspection, resulting in execution of injected directives...
PT-2026-88135
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...