Microsoft Windows: CVE-2026-70173: Microsoft Windows Search Component Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

CVE-2026-69766: Use After Free

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83571: Windows Audio Service Information Disclosure Vulnerability

Null pointer dereference in Windows Audio Service allows an authorized attacker to disclose information locally...

CVE-2026-83842: Double Free

Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69880: Desktop Window Manager Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-83652: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-83917: Use After Free

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally...

CVE-2026-69919: Out-of-bounds Read

Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83719: Servicing Stack Updates Information Disclosure Vulnerability

Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...

PT-2026-112182

Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally...

Microsoft Windows: CVE-2026-83635: Role: DNS Server Denial of Service Vulnerability

Out-of-bounds read in DNS Server allows an unauthorized attacker to deny service over a network...

PT-2026-111676

Name of the Vulnerable Software and Affected Versions SourceCodester Online Exam System version 1.0 Description An issue exists in the Login Endpoint within the file adminpanel/admin/query/loginExe.php. Remote manipulation of the username and pass arguments allows for SQL injection, a technique...

CVE-2026-94410: Missing Authorization

A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators. This results in a low level of confidentiality breach, as no particularly sensitive information is affected...

PT-2026-112310

Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...

CVE-2026-83518: Heap-based Buffer Overflow

Heap-based buffer overflow in RPC Runtime allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87704: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-96302: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96854: Windows Device Association Service Information Disclosure Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...

PT-2026-111976

Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description Incorrect default permissions in the service allow an authorized attacker to elevate privileges locally, which enables them to affect the system. Recommendations At the...

PT-2026-112837

Name of the Vulnerable Software and Affected Versions Windows 11 Version 24H2 Windows 11 Version 25H2 Windows 11 version 26H1 Windows 11 Version 26H2 Description Missing authentication for a critical function in the Windows Health and Optimized Experiences Service allows an authorized attacker to...