212496 matches found
PT-2026-88132
🚨 CVE-2026-83985 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-87882
Heap-based buffer overflow in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally...
PT-2026-87981
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
PT-2026-87041
Uncontrolled recursion in Qt's QDomDocument serialization QtXml lets deeply nested untrusted XML crash the app via stack exhaustion DoS only...
PT-2026-87645
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
PT-2026-87647
Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to bypass a security feature locally...
PT-2026-87679
Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
PT-2026-87305
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
PT-2026-87792
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...
PT-2026-87826
Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
PT-2026-88730
Integer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88432
The Okta Access Gateway Kerberos configuration handler does not validate file paths specified in event payloads before writing file contents. The path from the event payload is used directly as the write destination, resulting in files being written to unintended locations on the appliance...
PT-2026-88741
Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
PT-2026-87518
Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized attacker to execute code over a network...
PT-2026-87744
Numeric truncation error in Windows Kerberos allows an authorized attacker to elevate privileges locally...
PT-2026-87515
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...
PT-2026-87966
Access of resource using incompatible type 'type confusion' in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
PT-2026-87546
Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...
PT-2026-87338
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network...
PT-2026-87767
Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...
PT-2026-87000
A flaw was found in Dogtag PKI, as used by FreeIPA's certificate authority component. The certificate profile import functionality does not fully validate uploaded profile content beyond the profile ID. An authenticated user with CA Administrator privileges can exploit Dogtag's...
PT-2026-87198
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...
PT-2026-87614
Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
PT-2026-86986
A vulnerability has been found in code-projects Student Crud Operation 1.0. This affects an unknown function of the file /edit.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...
PT-2026-88562
UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
PT-2026-87994
Use after free in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over a network...
PT-2026-87496
Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...
PT-2026-87742
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...
PT-2026-87121
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in plugin/YPTWallet/view/saveBalance.php that allows attackers to set arbitrary wallet balances by relying only on session cookies without token validation. Attackers can craft a...
PT-2026-87837
Heap-based buffer overflow in Windows Spaceport.sys allows an unauthorized attacker to execute code with a physical attack...
PT-2026-87339
Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...
PT-2026-87283
🛡️ Windows kernel flaw CVE-2026-68846 spans clients and servers. Patch it, verify the build—and enjoy another reminder that “Important” still means “do it now.” https://t.co/1ZsIcSfclq MicrosoftSecurity Msrc Cve202668846 https://t.co/DCutF2PshC...
PT-2026-87279
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally...
PT-2026-87959
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
PT-2026-87350
Microsoft's Security Advisory CVE-2026-69304 hits ASP․NET Core, a denial of service vulnerability. ASP․NET Core's MEV IValidationMessageFormatter is superseded by ValidationAttribute․FormatMessage, which the BCL now provides. The interface gets dropped in favor of the base class method. F ships n...
PT-2026-87772
Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
PT-2026-87902
🚨 CVE-2026-72992 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-88356
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-87630
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network...
PT-2026-87517
Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network...
PT-2026-87422
Null pointer dereference in Virtual Hard Disk VHD Miniport Driver allows an unauthorized attacker to deny service locally...
PT-2026-87074
An issue in the btm acl handle function of Bestechnic Co., Ltd BES2300 Bluetooth Audio SoC firmware v3.x and earlier allows attackers to cause a Denial of Service DoS via sending a crafted L2CAP packet...
PT-2026-87420
Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network...
PT-2026-87119
AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains an authentication bypass vulnerability where sqlDAL caches empty result sets that writeSql never invalidates. Attackers with a valid password can bypass email two-factor authentication on new devices because the confirmation...
PT-2026-88081
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
PT-2026-88011
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...
PT-2026-87423
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...
PT-2026-87495
Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to elevate privileges with a physical attack...