PT-2026-112995

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83587: Windows Core Messaging Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally...

CVE-2026-83876: Use After Free

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96323: Windows Update Elevation of Privilege Vulnerability

Use after free in Windows Update allows an authorized attacker to elevate privileges locally...

PT-2026-111657

Name of the Vulnerable Software and Affected Versions HBAI-Ltd Toonflow-app versions prior to 2.0.0 Description A flaw in the exportData endpoint allows for information disclosure. This issue requires local access to be exploited. Recommendations Upgrade to version 2.0.0 or later...

Microsoft Windows: CVE-2026-83702: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-70190: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-112239

Name of the Vulnerable Software and Affected Versions Microsoft HID Parser Library affected versions not specified Description An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when the software reads data...

Microsoft Windows: CVE-2026-70074: Windows DNS Information Disclosure Vulnerability

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information locally...

PT-2026-112887

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-83737: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70260: Microsoft Trace Data Helper Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83790: Windows Hello Elevation of Privilege Vulnerability

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88080: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69970: Kernel Streaming Service Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

CVE-2026-96958: Inefficient Algorithmic Complexity

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-112719

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description Weak authentication in the Windows Projected File System allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no...

Microsoft Windows: CVE-2026-83717: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-70160: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70118: Windows Audio Service Elevation of Privilege Vulnerability

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...