212496 matches found
PT-2026-88007
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
PT-2026-87504
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...
PT-2026-88295
In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-88209
In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-88454
The administrative panel of the Auth0 AD/LDAP Connector versions 6.5.0 and earlier listens on the local loopback interface without requiring authentication. This allows a local, low-privileged user or process on the host system to access the panel's management endpoints without credentials. Throu...
PT-2026-88211
In multiple locations, there is a possible use after free due to a race condition. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87275
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...
PT-2026-87883
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
PT-2026-87787
Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network...
PT-2026-88324
🚨 CVE-2025-64618 Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the pa...
PT-2026-87568
Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over a network...
PT-2026-87417
🚨 CVE-2026-69379: TOCTOU in ReFsDedupSvc Enables Arbitrary File Overwrite as SYSTEM + Video -Prediction: 📈 3 Positive | 📉 2 Negative https://t.co/rowJAcSEeL Educational Purposes!...
PT-2026-87553
Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
PT-2026-88422
🚨 CVE-2026-75740 Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the pa...
PT-2026-87255
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
PT-2026-88226
In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87410
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...
PT-2026-87403
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...
PT-2026-87678
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
PT-2026-87689
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
PT-2026-87430
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network...
PT-2026-87687
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally...
PT-2026-87717
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
PT-2026-87758
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
PT-2026-88124
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-88149
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
PT-2026-88031
Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intende...
PT-2026-88125
🚨 CVE-2026-83977 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-88035
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network...
PT-2026-88118
🚨 CVE-2026-83970 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-88129
🚨 CVE-2026-83981 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-88045
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network...
PT-2026-88314
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-88319
A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function is within roots. This manipulation causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is recommended to address this issue. Patch name:...
PT-2026-88151
“Pace the frontier”... China didn’t. This week’s AI talk: slow the labs so nobody “loses” the race. Amodei asked to pace. Trump said that helps China. Beijing called the slowdown malicious competition. Same week, two PRC-linked groups were already past the talk. The short version They phished NGO...
PT-2026-88293
A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skip spaces and comments of the file src/mjs tok.c. Executing a manipulation can lead to heap-based buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized...
PT-2026-88320
A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected element is the function vault unlock handler/vault recovery handler of the file vault.rs. Such manipulation leads to missing authentication. The attack can be launched remotely. The exploit has been...
PT-2026-88056
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...
PT-2026-86995
Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0...
PT-2026-87822
Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...
PT-2026-87375
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...
PT-2026-87374
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
PT-2026-87239
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
PT-2026-87254
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...
PT-2026-87005
A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A session identifier is generated using an algorithm with insufficient randomness, resulting in a token with low entropy that can be predicted or brute-forced within a feasible number of attempts. This could allow an...
PT-2026-87355
Use after free in Windows DNS allows an authorized attacker to elevate privileges locally...
PT-2026-87387
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...
PT-2026-87344
Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network...