212496 matches found
PT-2026-88111
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
PT-2026-88313
Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-88384
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-88418
Adobe Experience Manager is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the...
PT-2026-88382
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-88380
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-88225
In multiple functions of DeviceAdminAdd.java, there is a possible way to an overlay due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
PT-2026-87260
Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network...
PT-2026-88739
Use after free in WebPackaging in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-87791
Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...
PT-2026-87234
Use after free in SQL Server allows an authorized attacker to execute code over a network...
PT-2026-87599
Use after free in Windows HTTP.sys allows an authorized attacker to elevate privileges over a network...
PT-2026-87810
Out-of-bounds read in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
PT-2026-87812
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...
PT-2026-87811
Null pointer dereference in Windows Schannel allows an authorized attacker to deny service over a network...
PT-2026-87735
Missing release of memory after effective lifetime in Active Directory Domain Services allows an unauthorized attacker to deny service over a network...
PT-2026-87299
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...
PT-2026-88501
Impact The endpoints /rest/roles/:slug/assignments and /rest/roles/:slug/assignments/:projectId/members checked only that the caller could manage the role type, not that they could see the project named in the request. A user holding role-management permission could therefore name any project on...
PT-2026-88333
When a Quarkus application has multiple endpoints secured by individual OIDC provider tenants, such as "/oidc-provider1" that is secured by the OIDC Provider 1 and "/oidc-provider2" that is secured by the OIDC Provider 2, and an optional token introspection cache is also enabled, then a valid tok...
PT-2026-88123
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
PT-2026-88130
🚨 CVE-2026-83982 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-88113
🚨 CVE-2026-83954 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...
PT-2026-87477
A newly disclosed Windows BitLocker vulnerability CVE-2026-69449 could let attackers execute arbitrary code via local or network paths. Affected versions span Windows 10, Windows 11, and all recent Windows Server releases. Microsoft rates the risk “Important” yet “Exploitation Less Likely,” and h...
PT-2026-87277
CVE-2026-68840 scores 7.0 • Race condition in Windows USB Driver • Authorized local attacker can elevate privileges • Requires winning improper synchronization • Patched in September 2026 Patch Tuesday https://t.co/27yrnc7LWB https://t.co/LKYbgMl1iw...
PT-2026-87320
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...
PT-2026-88237
In onAttach of BiometricsSettingsBase.java, there is a possible authentication bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2026-87105
A vulnerability was identified in aircheng-org iWebShop-5 up to 5.15. This issue affects the function Update::index of the file controllers/update.php. The manipulation leads to missing authorization. Remote exploitation of the attack is possible. The exploit is publicly available and might be...
PT-2026-87317
Integer underflow wrap or wraparound in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...
PT-2026-87488
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...
PT-2026-87293
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network...
PT-2026-87531
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
PT-2026-87486
Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges over a network...
PT-2026-87510
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
PT-2026-87613
Use after free in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...
PT-2026-88656
Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88633
Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...
PT-2026-88560
Use after free in Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-88638
Clickjacking in Input in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
PT-2026-88623
Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
PT-2026-88150
Heap-based buffer overflow in Windows Print Spooler Components allows an unauthorized attacker to execute code over a network...
PT-2026-88551
Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88568
Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88596
UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88678
Use after free in Receiver in Google Chrome prior to 153.0.8010.36 allowed an adjacent attacker to execute arbitrary code outside the sandbox via crafted network traffic. Chromium security severity: High...
PT-2026-88702
Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially read memory outside the sandbox via a crafted HTML page. Chromium security severity: Low...
PT-2026-88758
Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...
PT-2026-88673
Improper input validation in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88703
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88688
Use after free in Chromecast in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88698
Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...