313353 matches found
Microsoft Windows: CVE-2026-85332: Windows Device Association Service Elevation of Privilege Vulnerability
Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...
PT-2026-113027
Name of the Vulnerable Software and Affected Versions Microsoft Windows Media Foundation affected versions not specified Description Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally. Deserialization is the process ...
PT-2026-112097
Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally. Additionally, the issue may allow remote attackers to execute arbitrary code and...
Microsoft Windows: CVE-2026-96316: Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability
Improper access control in Windows Routing and Remote Access Service RRAS allows an authorized attacker to perform tampering locally...
CVE-2026-109409: Improper Neutralization of Special Elements used in a Command
A flaw has been found in HBAI-Ltd Toonflow-app up to 1.1.8. The affected element is the function childprocess.exec of the file src/routes/setting/fileManagement/openFolder.ts of the component Open Folder Endpoint. Executing a manipulation of the argument path can lead to command injection. The...
CVE-2026-69974: Out-of-bounds Read
Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-96215: Windows Autopilot Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Autopilot allows an authorized attacker to elevate privileges locally...
CVE-2026-96868: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
PT-2026-112322
Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue exists where sensitive system information is exposed to an unauthorized control sphere, allowing an authorized attacker to disclose information locally. Recommendations At the...
CVE-2026-83895: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-83752: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
PT-2026-112443
Name of the Vulnerable Software and Affected Versions Windows Core Messaging affected versions not specified Description An untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendation...
CVE-2026-96926: Missing Authorization
Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...
Microsoft Windows: CVE-2026-105722: Windows Broadcast DVR User Service Elevation of Privilege Vulnerability
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
CVE-2026-96860: Out-of-bounds Read
Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally...
CVE-2026-103578: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack...
Microsoft Windows: CVE-2026-70155: Windows DNS Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network...
CVE-2026-109526: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component exportData Endpoint. Such manipulation leads to information disclosure. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...