212496 matches found
PT-2026-89117
These are all security issues fixed in the gdk-pixbuf-loader-libheif-1.23.4-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2026-87302
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...
PT-2026-88288
Improper neutralization of input during web page generation 'cross-site scripting' in Skype for Business allows an unauthorized attacker to perform spoofing over a network...
PT-2026-87271
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code with a physical attack...
PT-2026-87160
Improper handling of case sensitivity in the configuration validation component of MongoDB Server may cause the authorization subsystem to remain in a default disabled state during server startup. An unauthenticated user with network access to a deployment where this condition occurs can perform...
PT-2026-86956
SAP S/4HANA Finance Advanced Payment Management does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be...
PT-2026-87642
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
PT-2026-87666
Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network...
PT-2026-87544
Use after free in Reliable Multicast Transport Driver RMCAST allows an unauthorized attacker to execute code over a network...
PT-2026-87549
Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...
PT-2026-87228
Untrusted pointer dereference in SQL Server allows an authorized attacker to execute code over a network...
PT-2026-87453
Use after free in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...
PT-2026-87740
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
PT-2026-87739
Use after free in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally...
PT-2026-87419
Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack...
PT-2026-88507
Impact The expression compiler's sanitizer resolved through a dynamically-scoped this, so a class field named sanitize rebound it and reached the Function constructor. On the backend, any expression author could run code in the n8n process; in the editor preview, a member's expression could run a...
PT-2026-87396
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
PT-2026-88057
Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to execute code locally...
PT-2026-87698
Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
PT-2026-87886
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
PT-2026-87424
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network...
PT-2026-87965
Access of resource using incompatible type 'type confusion' in Windows DHCP Server allows an unauthorized attacker to deny service over a network...
PT-2026-87176
UC Browser for Android package com.UCMobile.intl, version 13.7.8.1314 contains a Universal Cross-Site Scripting vulnerability that allows an attacker to execute arbitrary JavaScript in the context of any origin. An attacker hosts a specially crafted URL on a UC-owned domain via a reflected XSS th...
PT-2026-87999
🚨 CVE-2026-78455 Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack. 🎖@cveNotify...
PT-2026-88307
ColdFusion is affected by an Improper Access Control vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not require user interaction...
PT-2026-87651
Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network...
PT-2026-88537
Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...
PT-2026-88346
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-87989
🚨 CRITICAL: CVE-2026-78445 CVSS 9.8 Use-after-free in Windows Services for NFS ONCRPC XDR Driver enables unauthenticated RCE over network. No user interaction required. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/L89LsUn6sU...
PT-2026-88026
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
PT-2026-87152
An internal aggregation expression in MongoDB Server was incorrectly registered as accessible to any authenticated user rather than being restricted to internal cluster operations. By crafting a malformed index specification within this expression, an authenticated user with read-only privileges...
PT-2026-88366
Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting XSS vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in...
PT-2026-87500
Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...
PT-2026-87617
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
PT-2026-88504
Impact The Git node validated the repository that a fetch or pull targeted, but setUpstream wrote a branch..remote value into the repository's own configuration without validating it. A subsequent fetch or pull resolved the remote from that configuration rather than from the checked parameter, so...
PT-2026-87115
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in deleteHistory.json.php and finishAll.json.php that allows unauthenticated attackers to mutate live history by making GET requests without CSRF token validation. Attackers can...
PT-2026-87635
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network...
PT-2026-88003
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-87144
mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability in the tableName parameter at /sys/dbConnect/data. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...
PT-2026-88661
Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...
PT-2026-87579
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...
PT-2026-87100
Incorrect access control in the SellerAuthorizeAspect component of springboot-project v1.0.0 allows unauthenticated attackers to access all seller management interfaces and list all products/orders, put products on/off sale, finish/cancel orders, and modify categories without authentication...
PT-2026-87570
Heap-based buffer overflow in Windows Online Certificate Status Protocol OCSP allows an authorized attacker to elevate privileges locally...
PT-2026-87056
XenForo before 2.3.13 contains an OAuth2 authorization code reuse vulnerability that allows attackers to obtain unauthorized token pairs by submitting a previously used authorization code. Attackers can exploit the failure to invalidate or mark authorization codes as consumed after initial token...
PT-2026-88058
Inconsistent interpretation of http requests 'http request/response smuggling' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-87490
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
PT-2026-87329
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
PT-2026-88001
🚨 HIGH Severity: CVE-2026-78457 CVSS 7.0 Use-after-free flaw in Windows Security Health Service enables local privilege escalation by authenticated attackers. Patch immediately. CVE Vulnerability PatchNow ThreatIntel DFIR https://t.co/izz322NDMZ...
PT-2026-87316
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
PT-2026-88156
A cross site request forgery CSRF vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is...