Microsoft Windows: CVE-2026-96933: Windows COM+ Event System Service Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96209: Windows Network File System Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally...

CVE-2026-96933: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-96209: Out-of-bounds Read

Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally...

PT-2026-112230

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A stack-based buffer overflow in the Windows Resilient File System ReFS allows an unauthorized attacker to bypass a security feature. This issue can be triggered vi...

Microsoft Windows: CVE-2026-96950: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69675: Out-of-bounds Read

Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96953: Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability

Null pointer dereference in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute code locally...

PT-2026-113529

CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in an arbitrary file system write. An attacker could leverage this vulnerability to write to unauthorized files or directories outside of intended...

CVE-2026-96953: NULL Pointer Dereference

Null pointer dereference in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute code locally...

CVE-2026-96949: Concurrent Execution using Shared Resource with Improper Synchronization

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

PT-2026-113151

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A use-after-free condition in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges...

PT-2026-112972

Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description Improper authorization in the Windows Encrypting File System EFS allows an authorized attacker to perform local tampering, which can affect the system...

PT-2026-112830

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Common Log File System Driver. This issue allows an authorized attacker to elevate privileges locally on the...

CVE-2026-108966: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in SourceCodester Performance Indicator System 1.0. This issue affects some unknown processing of the file /opils/staff/product.php. The manipulation of the argument Category leads to sql injection. The attack may be initiated remotely. The exploit is publicly...

PT-2026-111279

Name of the Vulnerable Software and Affected Versions SourceCodester Performance Indicator System version 1.0 Description Remote SQL injection is possible due to improper processing of the /opils/staff/product.php endpoint. An attacker can exploit this by manipulating the Category variable to...

CVE-2026-83881: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally...

UBUNTU-CVE-2026-107615

An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init and ThemeLib load screenhooks32.dll / screenhooks64.dll with LoadLibrary using a bare fi...

CVE-2026-85355: Inclusion of Functionality from Untrusted Control Sphere

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-84009: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Projected File System allows an authorized attacker to perform tampering locally...