PT-2026-86982

A weakness has been identified in vgmstream up to r2117. This issue affects the function sscanf of the file src/meta/txth.c of the component txth-txtp. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made available to t...

PT-2026-87072

An issue in the l2cap handle data function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...

PT-2026-87262

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

PT-2026-87250

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...

PT-2026-87095

Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the administrator password by sending a request to the sysinfo action in the web management interface without a valid session. Attackers can replay the...

PT-2026-87800

Double free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

PT-2026-88244

A PoC/exploit has been discovered for vulnerability CVE-2026-49881 PT ID: PT-2026-88244 Vendor: Google Product: Android Description: In serviceClassExists of https://t.co/0gk5mCbseo, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation...

PT-2026-87146

A security issue exists in MongoDB's LDAP authorization integration where pooled LDAP connections can retain stale authentication identities after user authentication under certain configurations. Subsequent authorization queries may execute under an unintended LDAP identity rather than the...

PT-2026-87637

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

PT-2026-87280

Use after free in Microsoft Office Word allows an authorized attacker to disclose information locally...

PT-2026-87149

A race condition in MongoDB server's text index query parsing can cause a heap use-after-free read when handling upsert retry paths. Under certain concurrent index lifecycle operations, a raw pointer to internal text index metadata may be dereferenced after the underlying structures have been...

PT-2026-88030

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

PT-2026-88471

Acrobat Reader is affected by an Access of Resource Using Incompatible Type 'Type Confusion' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires...

PT-2026-87413

Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network...

PT-2026-87079

A cross-site request forgery vulnerability was discovered in the login functionality both standard and SAML due to missing validation of the anti-CSRF token. An attacker with a valid account can trick a victim into unknowingly authenticating with the attacker's credentials. Any operation performe...

PT-2026-87583

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

PT-2026-88276

Code execution can occur in versions of the MLflow platform running version 0.0.1 or newer, enabling a maliciously crafted model artifact to execute arbitrary code on an end user's system when loaded by the project...

PT-2026-88503

Impact The endpoint /rest/active-workflows returned every active workflow ID on the instance to any member, regardless of sharing, and workflow activation, deactivation and publication push events were broadcast to every connected client, carrying workflow IDs, version IDs and activation-error...

PT-2026-87358

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

PT-2026-87129

Craft CMS versions before 5.10.12 contain a remote code execution vulnerability in the element-index endpoint that allows authenticated content editors to instantiate arbitrary classes through the criteria parameter. Attackers can inject a malicious class via criteriawithTransforms0class that...

PT-2026-88254

In parsePartHeaders of multiple files, there is a possible persistent denial of service due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-87927

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...

PT-2026-88364

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

PT-2026-87431

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...

PT-2026-87185

A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.15. The impacted element is the function uploadFile of the file controllers/pic.php. Such manipulation of the argument outerSrc/selectPhoto leads to cross site scripting. The attack may be performed from remote. The...

PT-2026-87961

Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

PT-2026-87527

Insertion of sensitive information into externally-accessible file or directory in Microsoft Windows Search Component allows an authorized attacker to disclose information over a network...

PT-2026-87263

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

PT-2026-88143

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

PT-2026-87408

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally...

PT-2026-87560

Use after free in Windows DNS allows an authorized attacker to execute code over a network...

PT-2026-87865

Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally...

PT-2026-88351

Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...

PT-2026-88060

VULN-196220 is now CVE-2026-81376. It is a very simple and very dangerous vulnerability that allows code execution when opening untrusted code in sandboxed untrusted mode. Please update ASAP!...

PT-2026-87479

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network...

PT-2026-87853

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network...

PT-2026-87272

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...

PT-2026-87945

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

PT-2026-87946

Integer overflow or wraparound in SQL Server allows an unauthorized attacker to execute code over a network...

PT-2026-87901

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

PT-2026-88444

News: Xen published XSA-509 to 513 at 12:00 UTC. Worst is XSA-513 CVE-2026-79605/79606: a guest can run code in tapdisk as root in dom0. Also host DoS via PCI passthrough and oxenstored. Apply vendor Xen/XAPI patches now. https://t.co/CHBHEfTqbS...

PT-2026-88178

Samsung has detailed on its official website the September 2026 security patch with 90 vulnerability fixes for smartphones, tablets, and smartwatches in the Galaxy line. • The update package resolves flaws in the Android operating system, the One UI interface, and proprietary hardware components ...

PT-2026-87098

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to access already freed memory. This issue affects...

PT-2026-87071

An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials Manager. The actual credential value...

PT-2026-87859

Out-of-bounds read in Windows Spaceport.sys allows an unauthorized attacker to disclose information over a network...

PT-2026-87013

A vulnerability has been identified in SIMOVE Fleetmanager V3.1 All versions V3.1.13, SIMOVE Fleetmanager V3.2 All versions V3.2.4, SIMOVE Fleetmanager V3.3 All versions V3.3.2, SIMOVE Fleetmanager V4.0 All versions V4.0.1, SIPLANT V1.7 All versions, SIPLANT V2.2 All versions, SIPLANT V3.0 All...

PT-2026-87827

Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally...

PT-2026-87140

An unencrypted 'pause encryption request' message causes a denial of service in the in the RS9116W/SiWx917. See vulnerability B-E10 in the related paper below...

PT-2026-87054

XenForo before 2.3.13 contains an authentication bypass vulnerability in the OAuth2 token endpoint that allows unauthenticated attackers to obtain valid token pairs by submitting empty values for client secret and code verifier parameters. Attackers can exploit PHP truthy evaluation logic, which...

PT-2026-88173

A missing permission check in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier allows attackers with Item/Read permission on at least one job to read build parameter names and values of jobs they have no access to...