CVE-2026-83586: Weak Authentication

Weak authentication in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

PT-2026-112554

Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description Improper control of code generation leads to a code injection issue, allowing an authorized attacker to execute arbitrary code over a network and affect the system...

CVE-2026-108965: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/editquantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2026-85823: Use After Free

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally...

CVE-2026-70143: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally...

PT-2026-112252

Name of the Vulnerable Software and Affected Versions Windows Network File System affected versions not specified Description A heap-based buffer overflow occurs in the Windows Network File System, which allows an authorized attacker to execute code locally. Additionally, remote attackers may be...

PT-2026-112206

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description Improper access control in the Windows Projected File System allows an authorized attacker to locally disclose sensitive information, which can affect the system...

PT-2026-112425

Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description A buffer over-read in the Windows Encrypting File System EFS allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment,...

PT-2026-112184

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description Exposure of sensitive system information to an unauthorized control sphere in Windows Cryptographic Services allows an authorized attacker to disclose information...

PT-2026-112070

Name of the Vulnerable Software and Affected Versions Windows Network File System affected versions not specified Description An out-of-bounds read in the Windows Network File System allows an authorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds re...

CVE-2026-96857: Files or Directories Accessible to External Parties

Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally...

CVE-2026-70084: Improper Limitation of a Pathname to a Restricted Directory

Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally...

PT-2026-112736

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description The Windows Common Log File System Driver contains a flaw where functionality from an untrusted control sphere is included, allowing an authorized attacker to...

CVE-2026-85822: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83683: Windows Encrypting File System (EFS) Information Disclosure Vulnerability

Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to disclose information over a network...

ROS-20261013-73-0446

The vulnerability in the kernel-lt is related to the lack of checks for division by zero. Exploiting this vulnerability can allow an attacker to cause a system failure...

Microsoft Windows: CVE-2026-83763: Windows Input System Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Input System allows an authorized attacker to elevate privileges locally...

CVE-2026-107615

An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init and ThemeLib load screenhooks32.dll / screenhooks64.dll with LoadLibrary using a bare fi...

PT-2026-112766

Name of the Vulnerable Software and Affected Versions Windows Distributed File System DFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Distributed File System DFS, which allows an authorized attacker to execute arbitrary code over a network and...

PT-2026-112828

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description A use-after-free condition in the Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...