212496 matches found
PT-2026-87410
Out-of-bounds read in Windows Network File System allows an authorized attacker to deny service over a network...
PT-2026-87403
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...
PT-2026-87678
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
PT-2026-87689
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
PT-2026-87430
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network...
PT-2026-87687
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally...
PT-2026-87717
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
PT-2026-87758
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...
PT-2026-88124
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-88149
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
PT-2026-88031
Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intende...
PT-2026-88125
🚨 CVE-2026-83977 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-88122
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-88035
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network...
PT-2026-88118
🚨 CVE-2026-83970 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-88129
🚨 CVE-2026-83981 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-88315
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-88045
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to disclose information over a network...
PT-2026-88314
Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-88043
Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network...
PT-2026-88319
A weakness has been identified in opengeos GeoLibre up to 2.3.0. Impacted is the function is within roots. This manipulation causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is recommended to address this issue. Patch name:...
PT-2026-88151
“Pace the frontier”... China didn’t. This week’s AI talk: slow the labs so nobody “loses” the race. Amodei asked to pace. Trump said that helps China. Beijing called the slowdown malicious competition. Same week, two PRC-linked groups were already past the talk. The short version They phished NGO...
PT-2026-88293
A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skip spaces and comments of the file src/mjs tok.c. Executing a manipulation can lead to heap-based buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized...
PT-2026-88320
A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected element is the function vault unlock handler/vault recovery handler of the file vault.rs. Such manipulation leads to missing authentication. The attack can be launched remotely. The exploit has been...
PT-2026-88056
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...
PT-2026-86995
Allocation of Resources Without Limits or Throttling vulnerability in Automattic WooCommerce allows HTTP DoS. This issue affects WooCommerce: from n/a before 11.1.0...
PT-2026-87822
Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Microsoft.DiaSymReader.Native. This advisory also provides guidance on what...
PT-2026-87375
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...
PT-2026-87374
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
PT-2026-88600
Improper validation of array index in ANGLE in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-87239
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
PT-2026-87254
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...
PT-2026-87005
A vulnerability has been identified in Reyrolle 7SR5 All versions V2.70. A session identifier is generated using an algorithm with insufficient randomness, resulting in a token with low entropy that can be predicted or brute-forced within a feasible number of attempts. This could allow an...
PT-2026-87355
Use after free in Windows DNS allows an authorized attacker to elevate privileges locally...
PT-2026-88062
Interpretation conflict in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-88644
Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Low...
PT-2026-87387
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...
PT-2026-87709
Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network...
PT-2026-87344
Storing passwords in a recoverable format in Windows DHCP Server allows an authorized attacker to disclose information over a network...
PT-2026-87970
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
PT-2026-87683
Double free in Windows Hello allows an authorized attacker to elevate privileges locally...
PT-2026-88110
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
PT-2026-87120
AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability in LoginControl::verifyChallenge that uses loose comparison == instead of strict comparison === against unset session values. Attackers with only a password can submit an empty request to...
PT-2026-87438
Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally...
PT-2026-87608
Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...
PT-2026-87913
Missing authentication for critical function in Windows Autopilot allows an authorized attacker to perform tampering locally...
PT-2026-87113
The JWT signing secret in yfexam-exam v2.0 is derived from the username and the current month instead of a random server-side key, making the secret key easily obtainable via a bruteforce attack...
PT-2026-88065
Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network...