212496 matches found
PT-2026-87104
A Cross-Site Request Forgery CSRF vulnerability in WatchGuard Dimension's database snapshot creation feature allows a remote attacker to trigger unauthorized snapshot creation by tricking an authenticated administrator into visiting a specially crafted web page...
PT-2026-87241
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
PT-2026-87264
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
PT-2026-87306
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...
PT-2026-87244
Out-of-bounds read in SQL Server allows an authorized attacker to deny service over a network...
PT-2026-87487
Stack-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code over a network...
PT-2026-88339
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-87087
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
PT-2026-88510
Impact The Elasticsearch and ElasticSecurity nodes built REST endpoints by interpolating user-provided identifiers straight into the request path. A value containing path separators or dot segments changed which endpoint the request actually reached, so an operation intended for one document coul...
PT-2026-88469
Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...
PT-2026-87367
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-88417
🚨 CVE-2026-75735 Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the pa...
PT-2026-87180
A url redirection to untrusted site 'open redirect' vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via...
PT-2026-88511
Impact The GitHub Trigger generated a signing secret when it registered a webhook and verified X-Hub-Signature-256 on each delivery. When GitHub answered the create request with a 422 because a webhook for the URL already existed, the node adopted the remote hook but kept only its id and events,...
PT-2026-87991
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-88300
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-88359
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-87733
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...
PT-2026-87906
🚨 CVE-2026-72996 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-87289
Use of uninitialized resource in Microsoft Account allows an authorized attacker to disclose information locally...
PT-2026-88468
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-88483
Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-87451
Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network...
PT-2026-87062
XenForo before 2.3.13 contains a missing authorization vulnerability in the ACP cache-rebuild dispatcher that allows limited administrators with only the rebuildCache permission to perform unauthorized approval queue actions by supplying an arbitrary job class and actor user ID in the POST body...
PT-2026-87909
🚨 CVE-2026-73000 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-87123
AVideo through 29.0 contains an information disclosure vulnerability in restreamsActive.json.php that allows authenticated streamers to enumerate source stream keys and identities of all other streamers' active restreams. The endpoint fails to filter results by user ownership, exposing sensitive...
PT-2026-88024
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
PT-2026-88223
In multiple functions of rw t3t.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-88012
Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack...
PT-2026-87076
A vulnerability was determined in star7th showdoc up to 3.9.1. This vulnerability affects unknown code of the file web src/public/editor.md/editormd.js of the component API Page Save Endpoint. Executing a manipulation can lead to cross site scripting. The attack may be launched remotely. The...
PT-2026-88515
Maravel, a PHP framework oriented towards dependency injection, prior to version 10.74.0 has a high-severity Token Replay Vulnerability arising from a structural lifecycle mismatch between stateless token validation engines and high-performance relational caching layers. Any application with low...
PT-2026-88508
Impact The /chat WebSocket route resumed a paused execution from a resume token without checking that the node being resumed was a chat node. n8n hands that token to anonymous form submitters, so a party with no account could present it on the chat route and release an execution waiting at an...
PT-2026-88392
🚨 CVE-2026-75706 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires use...
PT-2026-88348
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-87873
Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally...
PT-2026-87790
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network...
PT-2026-87547
Improper neutralization of special elements used in a command 'command injection' in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
PT-2026-88251
In multiple locations, there is a possible memory safety issue due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-88280
Improper neutralization of input during web page generation 'cross-site scripting' in Skype for Business allows an unauthorized attacker to perform spoofing over a network...
PT-2026-87895
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack...
PT-2026-88419
Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...
PT-2026-87322
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network...
PT-2026-87090
🚨 CRITICAL — CVE-2026-12744 A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthentica… CVSS 9.8 🔴 No patch yet Full analysis → https://t.co/BqCC52NTwG Ivanti CyberSecurity InfoSec...
PT-2026-87458
Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network...
PT-2026-88019
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
PT-2026-87742
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...
PT-2026-87324
Integer underflow wrap or wraparound in Microsoft UxTheme Library uxtheme.dll allows an unauthorized attacker to execute code over a network...
PT-2026-88062
Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...