212496 matches found
PT-2026-87458
Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network...
PT-2026-88019
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
PT-2026-87742
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...
PT-2026-87324
Integer underflow wrap or wraparound in Microsoft UxTheme Library uxtheme.dll allows an unauthorized attacker to execute code over a network...
PT-2026-88062
Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-87902
🚨 CVE-2026-72992 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-87583
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-88321
Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...
PT-2026-88036
Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
PT-2026-88043
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network...
PT-2026-87709
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network...
PT-2026-87582
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network...
PT-2026-87169
A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15. Impacted is the function upload json/uploadFile of the file controllers/pic.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit has been released to the public and may be...
PT-2026-87548
Numeric truncation error in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...
PT-2026-88065
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...
PT-2026-87379
Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network...
PT-2026-87521
Integer overflow or wraparound in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
PT-2026-87725
Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...
PT-2026-87217
Alert for IT teams: Microsoft just patched a severe info-disclosure flaw in Teams for Android CVE-2026-65812 that could leak credentials. The bug allows attackers with low privileges to trick a user into interacting with crafted content over the network. Defenders need to verify that Android...
PT-2026-87596
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-88059
Server-side request forgery ssrf in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-87084
A Missing Authorization vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
PT-2026-88472
Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-87969
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack...
PT-2026-87629
Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network...
PT-2026-88131
🚨 CVE-2026-83983 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-88378
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-87203
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
PT-2026-87530
Stack-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network...
PT-2026-88386
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-87748
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...
PT-2026-88337
HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message. The wrappers and renderers that emit a form's errors interpolate the error string straight into HTML with no escaping. Two of the library's own messages, no...
PT-2026-88513
Impact The OpenAI Chat Model node checked a custom base URL against the credential's allowed-domains configuration before sending a request, but the model-search dropdown did not. A request setting options.baseURL on that path reached an arbitrary host with the credential attached, so the domain...
PT-2026-88390
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-88524
OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. In versions 0.6.1 through 0.6.2.5, when cjose encrypts a JWE using an AES-CBC-HMAC content-encryption algorithm A128CBC-HS256, A192CBC-HS384, or A256CBC-HS512 together with any key-management algorithm th...
PT-2026-87971
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...
PT-2026-86999
Improper restriction of XML external entity reference vulnerability in Cosminexus Component Container. This issue affects Cosminexus Component Container: from 11-70-01 before 11-70-03, from 11-60 before 11-60-03, from 11-50 through 11-50-03, from 11-40 through 11-40-03, from 11-30 through 11-30-0...
PT-2026-87057
XenForo before 2.3.13 contains a refresh token replay vulnerability that allows attackers to reuse a refresh token multiple times by exploiting the failure to mark tokens as consumed when the parent access token has expired. Attackers can repeatedly submit the same refresh token to generate...
PT-2026-87585
Buffer over-read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...
PT-2026-88022
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...
PT-2026-87785
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network...
PT-2026-87246
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
PT-2026-87929
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-87473
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...
PT-2026-87112
An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...
PT-2026-87765
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
PT-2026-88248
In get eht operation channel width of ieee802 11 common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-88221
In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...