Vulnerabilities we found and reported to vendors. Advisories are published after a fix is available. See the Disclosure Policy.
Discoveries
Vulnerabilities reported to vendors by Aretiq AI
CVE-2026-62801
Windows PowerShell Security Feature Bypass
Summary A path traversal vulnerability in Windows PowerShell allows an unauthenticated attacker to bypass path validation safeguards over a …
8 Sep 2026
CVE-2026-69364
Windows Print Spooler Components Elevation of Privilege
Summary A race condition in the Windows Print Spooler service leads to a use-after-free that allows an authenticated attacker to escalate …
8 Sep 2026
CVE-2026-62912
Microsoft Exchange Server Deserialization Denial of Service
Summary A deserialization of untrusted data vulnerability in Microsoft Exchange Server allows any user with a mailbox account to crash the …
11 Aug 2026