212496 matches found
PT-2026-87473
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...
PT-2026-87112
An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbitrary code via sending a crafted broadcast message...
PT-2026-87765
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
PT-2026-88248
In get eht operation channel width of ieee802 11 common.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-88221
In setupLayout of PickActivity.java, there is a possible bypass of the "Install unknown apps" security restriction due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87303
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...
PT-2026-87692
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network...
PT-2026-87586
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-87208
Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network...
PT-2026-87169
A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.15. Impacted is the function upload json/uploadFile of the file controllers/pic.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit has been released to the public and may be...
PT-2026-87061
XenForo before 2.3.13 contains a payment replay vulnerability in the PayPal REST payment provider that allows attackers to process the same webhook payload multiple times by exploiting a missing duplicate transaction ID check. Attackers can replay a valid webhook payload to trigger duplicate...
PT-2026-87065
XenForo before 2.3.13 contains an unauthenticated information disclosure vulnerability that allows unauthenticated attackers to retrieve private unfurl records by supplying predictable auto-increment primary key IDs to the unfurl endpoint. Attackers can enumerate or predict result IDs and query t...
PT-2026-87067
XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated non-super administrators with style permissions to write arbitrary files outside the intended extraction directory by using backslash-based traversal...
PT-2026-87088
A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote authenticated attacker to execute arbitrary code on the server...
PT-2026-87091
šØ CRITICAL ā CVE-2026-12745 A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticaā¦ CVSS 9.8 š“ No patch yet Full analysis ā https://t.co/HdDXJJRQ5P Ivanti CyberSecurity InfoSec...
PT-2026-87044
DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Store...
PT-2026-88148
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
PT-2026-87708
Improper link resolution before file access 'link following' in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally...
PT-2026-87070
A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be socially engineered into importing a...
PT-2026-88484
Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-88229
Androidās September 2026 security update fixed 180 issues. The one that stands out is CVE-2026-28662: Wi-Fi related memory corruption that can lead to remote code execution with no user interaction and no additional privileges. Still the class of bug that turns a nearby attacker into a device own...
PT-2026-87972
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
PT-2026-87823
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack...
PT-2026-87571
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack...
PT-2026-87942
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network...
PT-2026-87188
Impact The OAuth token endpoint bound an authorization code's first access token to the consented resource, but not its refresh token. Refreshing only checked that the requested resource was registered, not that it matched the original grant. An OAuth client approved for one workflow could refres...
PT-2026-87008
A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. The web server does not properly limit or manage system resources when processing a high volume of concurrent HTTP requests. This could allow an unauthenticated remote attacker to cause the entire device to crash and reboot,...
PT-2026-87050
Cvlaunchd contained a missing authorization issue affecting command execution authorization. Software customers upgrade to resolved maintenance release. Update all Commvault installations, including Commserve, Webserver, Command Center, Media Agents, Clients and HyperScale X...
PT-2026-87604
Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network...
PT-2026-87199
A new vulnerability with increased severity was disclosed for Microsoft Windows CVE-2026-58599 https://t.co/KnKmDk7lXz...
PT-2026-88263
In forEachLine of MountRegistry.cpp, there is a possible out of bounds read due to a buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-88250
In tt face colr blend layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87985
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
PT-2026-88008
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
PT-2026-88460
Silverpeas Core 6.4.6 is vulnerable to Cross Site Scripting XSS via the Document management file upload feature...
PT-2026-88303
Illustrator is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a victim must...
PT-2026-88268
Adobe Commerce is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field,...
PT-2026-88269
Adobe Commerce is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field,...
PT-2026-88009
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...
PT-2026-88273
Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to access unauthorized files or directories outside the...
PT-2026-88399
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-87949
šØ CVE-2026-77489 Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally. š@cveNotify...
PT-2026-88005
Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
PT-2026-88429
The Okta Access Gateway includes an optional pass-through authentication source that accepts user identity from a client-supplied HTTP header without cryptographic validation. In architectures where this optional source is enabled without an upstream reverse proxy or firewall configured to saniti...
PT-2026-88425
Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:ProgramDataMaono'. Fixed in 4.0.80...
PT-2026-88021
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
PT-2026-87982
Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...
PT-2026-87887
Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally...