212496 matches found
PT-2026-87274
Use after free in Windows File History Service allows an authorized attacker to elevate privileges locally...
PT-2026-87885
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
PT-2026-88328
Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...
PT-2026-87654
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...
PT-2026-88332
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-87773
Use after free in Windows Virtual Trusted Platform Module allows an authorized attacker to elevate privileges locally...
PT-2026-87697
Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...
PT-2026-88115
🚨 CVE-2026-83967 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-88357
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-87633
Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network...
PT-2026-87724
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-87722
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
PT-2026-87653
Use after free in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally...
PT-2026-87663
Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...
PT-2026-87718
Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...
PT-2026-87727
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...
PT-2026-87567
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...
PT-2026-87346
Use after free in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally...
PT-2026-87347
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
PT-2026-87368
Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...
PT-2026-87327
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
PT-2026-87337
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
PT-2026-87569
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
PT-2026-87457
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally...
PT-2026-87728
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...
PT-2026-87935
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-88298
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-88240
In convertCleanApertureToRect of HeifCleanAperture.cpp, there is a possible way to cause a temporary denial of service due to an integer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87936
Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...
PT-2026-87760
Improper authentication in Spring Cloud Azure allows an unauthorized attacker to elevate privileges over a network...
PT-2026-88053
Improper neutralization of special elements used in an os command 'os command injection' in Azure HDInsights allows an authorized attacker to elevate privileges over a network...
PT-2026-87928
Improper resolution of path equivalence in Windows URL Moniker allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-87145
The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server mongod. Under certain specific conditions the regex match can start in the middle of a multi-code-unit character, triggering an assertion during query execution...
PT-2026-87602
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
PT-2026-87393
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-87257
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
PT-2026-88236
In screenArgsForPermissionCheckIfAny of multiple locations there is a possible risk of unauthorized access due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-88518
OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.4 20 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulati...
PT-2026-88014
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
PT-2026-88256
In checkUiccListenConfigNeeded of RoutingManager.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-88234
In updateInternal of MediaProvider.java, there is a possible expose contents of files due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-88283
Server-side request forgery ssrf in Skype for Business allows an unauthorized attacker to disclose information over a network...
PT-2026-88282
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network...
PT-2026-87998
Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally...
PT-2026-87960
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally...
PT-2026-87353
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
PT-2026-87110
An XXE XML External Entity vulnerability in the level-rule module of Distribution Management v1.0.0 allows attackers to read sensitive files, scan internal networks, or launch server attacks via supplying a crafted XML payload...
PT-2026-87866
Null pointer dereference in Windows SMB Server Network Transport Driver srvnet.sys allows an unauthorized attacker to deny service over a network...
PT-2026-87751
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...
PT-2026-87156
A use-after-free security issue in the cursor management component of MongoDB Server allows an authenticated user to cause a denial of service. Under specific timing conditions during cursor operations, a stale pointer to a freed resource may be retained and subsequently dereferenced during curso...