CVE-2026-70247: Out-of-bounds Read

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally...

PT-2026-112199

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description An out-of-bounds read exists in Windows DNS, which allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment, there is no information about a...

Microsoft Windows: CVE-2026-83505: Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

PT-2026-113058

Name of the Vulnerable Software and Affected Versions Windows Host Guardian Service affected versions not specified Description A stack-based buffer overflow occurs in Windows Host Guardian Service, which allows an unauthorized attacker to cause a denial of service over a network. A stack-based...

PT-2026-112178

Name of the Vulnerable Software and Affected Versions Windows Work Folders affected versions not specified Description A use-after-free condition exists in Windows Work Folders, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

Microsoft Windows: CVE-2026-83690: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70083: Role: DNS Server Tampering Vulnerability

Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally...

CVE-2026-83841: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83832: Windows Spaceport.sys Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-83854: Missing Authentication for Critical Function

Improper access control in Windows Notification allows an authorized attacker to disclose information locally...

CVE-2026-96317: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-111917

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A race condition occurs in the Windows Kernel due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally on the...

CVE-2026-63161: Session Fixation

Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session identifier in a victim's browser prior to login. Attackers can exploit the application's failure to regenerate the session id...

Microsoft Windows: CVE-2026-83634: Windows BitLocker Elevation of Privilege Vulnerability

Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally...

PT-2026-113337

Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session identifier in a victim's browser prior to login. Attackers can exploit the application's failure to regenerate the session id...

PT-2026-113086

Name of the Vulnerable Software and Affected Versions Remote Desktop Display Driver affected versions not specified Description An out-of-bounds read exists in the Remote Desktop Display Driver, which allows an authorized attacker to disclose information locally. This issue can enable attackers t...

vifm -- Unverified Ownership

https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/SkX7Pmiofg reports: Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user. Attackers can pre-create a world-writable vifm-ipc-vi...

PT-2026-112227

Name of the Vulnerable Software and Affected Versions Windows Client for NFS affected versions not specified Description An integer overflow or wraparound occurs in the Windows Client for NFS, which allows an authorized attacker to elevate privileges locally and affect the system. An integer...

CVE-2026-83859: Use After Free

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenJDK 11 vulnerabilities (USN-8674-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8674-1 advisory. It was discovered that the JSSE component of OpenJDK 11 did not correctly authenticate users. A remote...