Windows Kernel Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally...

Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability

Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally...

Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

Windows File History Service Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally...

Windows MIDI Service Module Elevation of Privileges Vulnerability

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability

Improper access control in Extensible Storage Engine ESENT allows an authorized attacker to elevate privileges locally...

Microsoft Office Information Disclosure Vulnerability

Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally...

Netlogon RPC Elevation of Privilege Vulnerability

Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally...

kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...

kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...

PT-2026-58274

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows Server 2025 affected versions not specified Description A use after free issue in the Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally, potentially granti...

PT-2026-58425

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow exists in Windows NTFS, which could allow an unauthorized attacker to execute code locally. This issue requires user interaction to be triggered...

PT-2026-58186

Name of the Vulnerable Software and Affected Versions Windows Spaceport.sys affected versions not specified Description An integer overflow or wraparound exists in the Spaceport.sys driver. This issue allows an unauthorized attacker with physical access to the system to elevate their privileges t...

PT-2026-58148

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use-after-free condition in the Windows Kernel allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment,...

PT-2026-58340

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A numeric truncation error in the Windows Resilient File System ReFS allows an authorized attacker to execute code locally, potentially enabling local privilege...

PT-2026-58194

Name of the Vulnerable Software and Affected Versions Windows Runtime affected versions not specified Description A use-after-free condition in Windows Runtime allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...

PT-2026-58564

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs when the software reads data past...

PT-2026-58662

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A use-after-free issue exists in the Windows Cloud Files Mini Filter Driver, specifically within the CldiStreamCompleteRequest function. This flaw allows an...

PT-2026-58195

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is...