313359 matches found
PT-2026-112285
Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
PT-2026-112510
Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A use-after-free condition in Windows NTFS enables an authorized attacker to elevate privileges locally. A use-after-free is a memory corruption issue that occurs when an application...
Microsoft Windows: CVE-2026-85852: Windows Management Instrumentation Information Disclosure Vulnerability
Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...
PT-2026-118118
Уязвимость редактора исходного кода Microsoft Visual Studio Code связана с неверным ограничением имени пути к каталогу с ограниченным доступом. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, раскрыть защищаемую информацию...
Microsoft Windows: CVE-2026-83732: Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-84011: Windows SMB Client Security Feature Bypass Vulnerability
Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally...
CVE-2026-70190: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83798: Windows Update Stack Spoofing Vulnerability
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally...
CVE-2026-83499: Insufficient Granularity of Access Control
Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62687: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-83722: Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
Use after free in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...
CVE-2026-85794: Out-of-bounds Read
Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-69926: Desktop Window Manager Elevation of Privilege Vulnerability
Access of resource using incompatible type 'type confusion' in Desktop Window Manager allows an authorized attacker to elevate privileges locally...
PT-2026-111405
Name of the Vulnerable Software and Affected Versions MosaicML Composer versions prior to 0.32.2 Description A path traversal issue exists in the Checkpoint Extraction component within the tarball.extractall function of the composer/utils/checkpoint.py file. This flaw allows a remote attacker to...
Microsoft Windows: CVE-2026-83853: Windows Hello Elevation of Privilege Vulnerability
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83758: Windows Error Reporting Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally...
CVE-2026-69971: Incorrect Authorization
Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...
PT-2026-118146
Уязвимость веб-платформы для совместной работы и управления документами Microsoft SharePoint Server Subscription Edition связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, проводить спуфинг-атаки...
PT-2026-111389
Name of the Vulnerable Software and Affected Versions Industrial Edge App Publisher versions prior to V1.27.9 Description The software fails to properly validate the server certificate during the initiation of a TLS connection. This flaw enables a Man-in-the-Middle attack, where an attacker can...