212496 matches found
PT-2026-87550
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally...
PT-2026-88388
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-87743
Improper encoding or escaping of output in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...
PT-2026-86962
Due to a Server-Side Request Forgery SSRF vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execution of...
PT-2026-88239
In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87587
Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
PT-2026-87330
Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...
PT-2026-87476
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
PT-2026-87474
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Compressed Folder allows an authorized attacker to elevate privileges locally...
PT-2026-87452
Integer underflow wrap or wraparound in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally...
PT-2026-87763
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...
PT-2026-87415
Missing authorization in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
PT-2026-87967
Access of resource using incompatible type 'type confusion' in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
PT-2026-87538
@deskmodder Important context: CVE-2026-69522 is a UI:R crafted-file RCE in this servicing set. If Visual Studio is in the environment, pair the .NET bumps with VS 2026 18.9.3 or VS 2022 17.14.40...
PT-2026-88482
Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-87951
Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally...
PT-2026-88480
Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-87747
Concurrent execution using shared resource with improper synchronization 'race condition' in DNS Server allows an unauthorized attacker to execute code over a network...
PT-2026-88621
Information leak in WebMCP in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
PT-2026-87868
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to execute code locally...
PT-2026-87238
Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network...
PT-2026-87281
CVE-2026-68844 carries CVSS 7.8. Heap-based buffer overflow in Windows Storage Spaces Controller lets authorized low-privilege attackers run code locally. Exploitation less likely, no known in-the-wild attacks. https://t.co/NM3ozLiuBS https://t.co/tcyocQVd5S...
PT-2026-88265
In multiple functions of alloc.c, there is a possible unauthorized read/write access due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87566
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally...
PT-2026-87171
A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information via crafted HTTP requests...
PT-2026-88157
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access such as WiFi credentials to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does...
PT-2026-88370
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-88667
UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted domain name. Chromium security severity: Medium...
PT-2026-87243
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
PT-2026-87786
Use after free in DNS Server allows an unauthorized attacker to execute code over a network...
PT-2026-87930
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-88299
ColdFusion is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary...
PT-2026-87603
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
PT-2026-87294
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally...
PT-2026-87584
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
PT-2026-87464
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
PT-2026-87482
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally...
PT-2026-87480
Missing authorization in Microsoft Windows Search Component allows an authorized attacker to perform tampering locally...
PT-2026-87475
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...
PT-2026-88279
A vulnerability was found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability is the function session start of the file login.php. The manipulation results in session fixiation. The attack can be launched remotely. The exploit has...
PT-2026-88455
The Auth0 AD/LDAP Connector is vulnerable to stored Cross-Site Scripting XSS issues due to improper HTML encoding of data in search results and updater log content displayed in the admin panel. An authenticated user with privileges to modify directory attributes, or a low-privileged local user on...
PT-2026-88639
Observable discrepancy in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88625
Out of bounds read in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to read memory outside the sandbox via a local program. Chromium security severity: High...
PT-2026-88597
Uninitialized resource in Codecs in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88585
Incorrect authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88718
Incorrect reference resolution in Storage in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
PT-2026-88550
Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Medium...
PT-2026-88710
Incorrect authorization in Omnibox in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88654
Race condition in Chromoting in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...
PT-2026-88750
Out of bounds read in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...