Microsoft Windows: CVE-2026-85364: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87700: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-62879: Missing Authentication for Critical Function

Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally...

CVE-2026-85935: Buffer Over-read

Buffer over-read in Windows USB Driver allows an authorized attacker to disclose information locally...

CVE-2026-85361: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83651: Windows GDI Information Disclosure Vulnerability

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network...

PT-2026-112907

Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85865: Windows DHCP Server Security Feature Bypass Vulnerability

Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally...

CVE-2026-96305: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70064: Windows Kerberos Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-70013: Use After Free

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-83659: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

PT-2026-112878

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-69718: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Windows Update allows an authorized attacker to elevate privileges locally...

PT-2026-112564

Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...

CVE-2026-58280

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-112842

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description An untrusted pointer dereference allows an unauthorized remote attacker to execute arbitrary code over a network, potentially compromising the system. Recommendations At the moment, there ...

CVE-2026-70199: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2026-83887: Out-of-bounds Read

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

PT-2026-112601

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description A buffer over-read in the Windows Common Log File System Driver allows an authorized attacker to disclose sensitive information locally and affect the system. A...