Microsoft Windows: CVE-2026-88076: Windows Installer Elevation of Privilege Vulnerability

Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-83929: Out-of-bounds Write

Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network...

CVE-2026-70067: Use After Free

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

PT-2026-113182

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...

CVE-2026-69964: Use After Free

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

CVE-2026-96928: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

Microsoft SQL Server: CVE-2026-88085: Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-109160: URL Redirection to Untrusted Site

A vulnerability was determined in PublicCMS up to 5.202608.a. Affected by this issue is the function SafeConfigComponent.getSafeUrl of the file publiccms-core/src/main/java/com/publiccms/logic/component/config/SafeConfigComponent.java of the component pay Endpoint. Executing a manipulation of the...

PT-2026-111126

A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kpt shape result...

Microsoft Windows: CVE-2026-96932: Windows Embedded Mode Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83634: Windows BitLocker Elevation of Privilege Vulnerability

Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally...

PT-2026-111163

A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function load ckpt of the file torchdistill/common/main util.py. Executing a manipulation of the argument src ckpt can lead to deserialization. The attack needs to be launched locally. The exploit has been...

PT-2026-112294

Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.win-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.win-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.win-x64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.win-x86...

Microsoft Windows: CVE-2026-88072: Windows Host Guardian Service Elevation of Privilege Vulnerability

Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70222: Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

PT-2026-112813

Name of the Vulnerable Software and Affected Versions Windows Management Instrumentation affected versions not specified Description An out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose sensitive information locally and affect the system. An...

CVE-2026-83713: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83875: Windows Human Interface Device Information Disclosure Vulnerability

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

CVE-2026-93905: Deserialization of Untrusted Data

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to corrupt the persisted status of batch job instances...

CVE-2026-108133: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...