PT-2026-112788

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally...

PT-2026-112349

Name of the Vulnerable Software and Affected Versions Microsoft Trace Data Helper affected versions not specified Description An issue in Microsoft Trace Data Helper allows an authorized attacker to locally disclose sensitive system information to an unauthorized control sphere. Recommendations A...

VulnCheck KEV: CVE-2026-104935

Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands...

PT-2026-112493

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A use-after-free condition occurs in Windows Error Reporting, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue...

CVE-2026-96215: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Autopilot allows an authorized attacker to elevate privileges locally...

CVE-2026-70159: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-70580: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally...

PT-2026-112068

Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-arm versions 9.0.0 through 9.0.20 Microsoft.NETCore.App.Runtime.linux-arm versions 10.0.0 through 10.0.12...

PT-2026-112825

Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally...

CVE-2026-70023: Use After Free

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83659: Windows User Profile Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83668: Out-of-bounds Read

Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-69942: Windows Overlay Filter Remote Code Execution Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally...

Microsoft Windows: CVE-2026-69952: Windows Overlay Filter Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-96865: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally...

CVE-2026-83723: Use of Uninitialized Resource

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...

CVE-2026-83787: Authentication Bypass Using an Alternate Path or Channel

Insufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally...

CVE-2026-96859: Out-of-bounds Read

Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally...

CVE-2026-97800: Incorrect Permission Assignment for Critical Resource

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...

CVE-2026-102231: Improper Resolution of Path Equivalence

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...