CVE-2026-83865: Relative Path Traversal

Relative path traversal in Windows Internet wininet.dll allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-85372: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-85850: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-108941: Improper Control of Generation of Code

A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parsecfgargs of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfgargs leads to code injection. The attack can only be performed from a local...

Microsoft Windows: CVE-2026-96927: Windows NTFS Information Disclosure Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96247: Windows Kernel-Mode Drivers Information Disclosure Vulnerability

Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...

PT-2026-113115

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-112997

Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft SharePoint: CVE-2026-88166: Microsoft Office SharePoint Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-69898: Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-96325: Missing Reference to Active Allocated Resource

Missing reference to active allocated resource in Windows SMB Server allows an unauthorized attacker to deny service over a network...

PT-2026-112468

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description Improper access control allows an authorized attacker to disclose sensitive information locally and affect the system. Recommendations At the moment, there is no information...

CVE-2026-96911: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-85876: Use After Free

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87699: Winlogon Elevation of Privilege Vulnerability

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally...

CVE-2026-70164: Use After Free

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

UBUNTU-CVE-2026-108266

Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certificate public key and client nonce but not to the active TLS...

CVE-2026-70235: Missing Authorization

Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally...

Microsoft Windows: CVE-2026-70199: Windows Kernel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83676: Windows Installer Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally...