212496 matches found
PT-2026-87805
Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...
PT-2026-86970
Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by bypassing the driver's verification. Refer to the ' Security Update for Armoury Crate App' section on the ASUS Security...
PT-2026-88557
Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...
PT-2026-88431
The Okta Access Gateway does not sanitize SAML assertion attribute values before interpolating them into LDAP search filters in the LDAP datastore configuration. The raw values are substituted directly into the filter string and passed to the LDAP search operation, resulting in modification of th...
PT-2026-87391
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...
PT-2026-87111
L-ONE v1.0.0 was discovered to contain multiple SQL injection vulnerabilities in the /attachment/getBusinessUploadList component via the busid, id, and taskid parameters. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...
PT-2026-87574
Untrusted pointer dereference in Windows Print Spooler Components allows an authorized attacker to deny service over a network...
PT-2026-87454
Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network...
PT-2026-87466
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
PT-2026-87896
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network...
PT-2026-88440
The Okta Access Gateway does not neutralize shell metacharacters in SNMP configuration values before a privileged script uses them to construct OS commands. An authenticated local user with access to the management interface can supply crafted values, resulting in the execution of arbitrary OS...
PT-2026-86990
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Easy Appointments allows DOM-Based XSS. This issue affects Easy Appointments: from n/a through 4.0.2.1...
PT-2026-87481
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
PT-2026-88292
A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/us edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...
PT-2026-87232
Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network...
PT-2026-88037
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network...
PT-2026-87042
A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling. This is caused by Jetty accepting a lone LF character as a terminator in parts of...
PT-2026-88104
Out-of-bounds read in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to disclose information locally...
PT-2026-87383
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
PT-2026-88317
Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...
PT-2026-88220
In btm sec encrypt change of btm sec.cc, there is a possible downgrade attack due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87643
Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally...
PT-2026-87184
A weakness has been identified in aircheng-org iWebShop-5 up to 5.15. The affected element is the function member list of the file controllers/member.php. This manipulation of the argument Search causes sql injection. The attack is possible to be carried out remotely. The exploit has been made...
PT-2026-88470
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-86960
SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows an authenticated low-privileged attacker to access certain administrative functionality or interface and obtain sensitive information about the system state, resulting in information disclosure. This disclosed...
PT-2026-87732
Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...
PT-2026-88524
OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE. In versions 0.6.1 through 0.6.2.5, when cjose encrypts a JWE using an AES-CBC-HMAC content-encryption algorithm A128CBC-HS256, A192CBC-HS384, or A256CBC-HS512 together with any key-management algorithm th...
PT-2026-89116
These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.4-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-89118
These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.4-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-89119
These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.4-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-87328
Use after free in Windows License Manager allows an authorized attacker to elevate privileges locally...
PT-2026-87963
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
PT-2026-87914
Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...
PT-2026-86964
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in ash-project usage rules allows a malicious package publisher to inject terminal control sequences into the output of mix usage rules.search docs. mix usage rules.search docs searches Hex documentation through...
PT-2026-87326
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...
PT-2026-86972
Exposure of Sensitive System Information to an Unauthorized Control Sphere in Armoury Crate driver allows a local user to obtain kernel virtual addresses via a crafted IOCTL request by bypassing the driver's verification, potentially providing further insight into the kernel memory layout.Refer t...
PT-2026-87336
Improper link resolution before file access 'link following' in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
PT-2026-87186
An information disclosure vulnerability has been identified in Omada Controller. An API endpoint intended for Controller initialization remains accessible after completion and may disclose account-related information to unauthenticated remote users. Successful exploitation may allow an attacker...
PT-2026-88337
HTML::FormHandler versions before 0.410000 for Perl allow cross-site scripting via a submitted value rendered unescaped in an error message. The wrappers and renderers that emit a form's errors interpolate the error string straight into HTML with no escaping. Two of the library's own messages, no...
PT-2026-87556
Use after free in Active Directory Domain Services allows an unauthorized attacker to execute code over a network...
PT-2026-87525
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...
PT-2026-88296
ColdFusion is affected by an Improper Neutralization of Directives in Dynamically Evaluated Code 'Eval Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code...
PT-2026-88144
Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...
PT-2026-88338
An issue in OpenDDS 3.33.x allows a local attacker to cause a denial of service via the verify function in the SIgnedDocument module...
PT-2026-87349
Out-of-bounds read in Push Message Routing Service allows an authorized attacker to disclose information locally...
PT-2026-87782
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
PT-2026-87770
Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code locally...
PT-2026-87564
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...