CVE-2026-70212: Improper Restriction of Communication Channel to Intended Endpoints

Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally...

EUVD-2026-98807

Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service via the jsmn.h, jsmnparse, example/jsondump.c, dump components...

CVE-2026-85372: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85859: Windows Message Queuing Queue Manager Denial of Service Vulnerability

Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network...

CVE-2026-70051: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows SmartScreen allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-97787: Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

PT-2026-113138

Name of the Vulnerable Software and Affected Versions Windows Embedded Mode Service affected versions not specified Description A race condition occurs in the Windows Embedded Mode Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate...

Microsoft Windows: CVE-2026-83918: Windows Kernel Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-70232: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...

PT-2026-112750

Use after free in WebDAV allows an authorized attacker to elevate privileges locally...

CVE-2026-102217: Improper Resolution of Path Equivalence

Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network...

PT-2026-111912

Name of the Vulnerable Software and Affected Versions Windows Container Isolation FS Filter Driver affected versions not specified Description Improper access control in the unionfs.sys driver allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment...

Microsoft Windows: CVE-2026-103558: Windows Routing and Remote Access Service (RRAS) Denial of Service Vulnerability

Deadlock in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to deny service over a network...

PT-2026-111277

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit quantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been...

PT-2026-113133

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

PT-2026-112700

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description Incorrect authorization in the Windows SMB Client allows an authorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information about a...

CVE-2026-85799: Use After Free

Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83887: HID Parser Library Information Disclosure Vulnerability

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

CVE-2026-83717: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2026-113475

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description The use of an uninitialized variable in the ThirdParty lmza sdk allows a remote attacker to potentially read memory inside the sandbox by using a crafted file. Recommendations Update...