CVE-2026-69958: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack...

PT-2026-112255

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description Improper authorization in the Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally. Recommendations At the moment, there...

Microsoft Windows: CVE-2026-70006: Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

CVE-2026-70284: Use of Uninitialized Resource

Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

PT-2026-111408

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-432BRP version 3.10B20 Description A stack-based buffer overflow occurs when manipulating the Name argument within the formTcpipSetup function located in the /goform/formTcpipSetup file. This issue allows a remote attacker to...

PT-2026-112353

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description An issue exists where improper neutralization of special elements used in an SQL command leads to SQL injection. This allows an authorized attacker to elevate privileges...

CVE-2026-70155: Missing Release of Memory after Effective Lifetime

Missing release of memory after effective lifetime in Windows DNS allows an unauthorized attacker to deny service over a network...

CVE-2026-96850: Use of Uninitialized Resource

Use of uninitialized resource in Windows Modern Device Management MDM allows an authorized attacker to disclose information locally...

PT-2026-112850

Name of the Vulnerable Software and Affected Versions Windows Clipboard User Service affected versions not specified Description A race condition occurs in the Windows Clipboard User Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevat...

CVE-2026-88096: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DCOM Server allows an authorized attacker to elevate privileges locally...

CVE-2026-83695: Use of Uninitialized Resource

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...

CVE-2026-70083: Incorrect Authorization

Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-83715: Windows Error Reporting Tampering Vulnerability

Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally...

CVE-2026-78556: Improper Certificate Validation

A vulnerability has been identified in Industrial Edge App Publisher All versions V1.27.9. The affected software does not properly validate the server certificate when initiating a TLS connection. This allows an attacker to intercept and relay communication Man-in-the-Middle attack and to spoof a...

CVE-2026-70135: Out-of-bounds Read

Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally...

CVE-2026-83907: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70122: Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-85852: Out-of-bounds Read

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83762: Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-102220: Windows VHD miniport driver Elevation of Privilege Vulnerability

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally...