212496 matches found
PT-2026-87533
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
PT-2026-87576
Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network...
PT-2026-87610
Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
PT-2026-87623
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally...
PT-2026-87278
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...
PT-2026-87297
Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally...
PT-2026-87401
Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...
PT-2026-87265
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...
PT-2026-87273
Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...
PT-2026-87295
Stack-based buffer overflow in Windows Fast FAT Driver allows an authorized attacker to elevate privileges over a network...
PT-2026-87484
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network...
PT-2026-87498
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...
PT-2026-87578
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
PT-2026-87597
Heap-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
PT-2026-87043
When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest...
PT-2026-88368
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-87828
Integer overflow or wraparound in Windows Work Folder Service allows an authorized attacker to execute code over a network...
PT-2026-88163
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, user objects can appear as nested field values in other deserialized XML objects, allowing attackers with Overall/Read permission to create user objects by submitting crafted XML...
PT-2026-87941
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network...
PT-2026-87862
Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally...
PT-2026-88301
Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-87933
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally...
PT-2026-88310
ColdFusion is affected by a reflected Cross-Site Scripting XSS vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Scope is changed...
PT-2026-87298
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
PT-2026-87532
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network...
PT-2026-87124
AVideo through 29.0 contains an information disclosure vulnerability in plugin/Live/stats.json.php that allows unauthenticated attackers to retrieve stream keys and m3u8 URLs by accessing the endpoint without authentication. Attackers can enumerate private, unlisted, and group-restricted live...
PT-2026-88443
A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin. An authenticated low-privileged user who can modify page content and provide controlled imported content can trigger server-side execution by referencing crafted external or uploaded text content through the affected...
PT-2026-88054
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code over a network...
PT-2026-88067
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...
PT-2026-87381
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...
PT-2026-87397
Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network...
PT-2026-87394
Out-of-bounds read in Windows Text Shaping allows an authorized attacker to disclose information locally...
PT-2026-87370
Untrusted search path in Windows Storage allows an authorized attacker to elevate privileges locally...
PT-2026-87741
Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network...
PT-2026-87138
The vtoken-minting and slpx pallets in Bifrost contain an improper authorization vulnerability in channel commission attribution. A signed account can supply an arbitrary registered channel id when minting tokens without verifying that the caller is authorized to mint on behalf of that channel...
PT-2026-87037
electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the...
PT-2026-87309
Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally...
PT-2026-87917
Exposure of private personal information to an unauthorized actor in Windows Biometric Service allows an authorized attacker to disclose information locally...
PT-2026-88477
Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
PT-2026-87235
Use of uninitialized resource in SQL Server allows an authorized attacker to disclose information over a network...
PT-2026-87282
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
PT-2026-87030
The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'updateAddon' function in all versions up to, and including, 27.2. This makes it possible for authenticated attackers, wit...
PT-2026-86959
SAP NetWeaver Business Client does not perform sufficient validation when processing certain locally stored data during application startup. An attacker with low privileges on the local system could replace this data with specially crafted content. When the application is next launched, the craft...
PT-2026-88613
Missing authorization in ControlledFrame in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
PT-2026-87331
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally...
PT-2026-89117
These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.4-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-87302
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...
PT-2026-88288
Improper neutralization of input during web page generation 'cross-site scripting' in Skype for Business allows an unauthorized attacker to perform spoofing over a network...
PT-2026-87271
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack...
PT-2026-87160
Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state during server startup. An unauthenticated user with network access to a deployment where this condition occurs can perform...