CVE-2026-87708: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-103567: Windows Broadcast DVR User Service Information Disclosure Vulnerability

Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...

CVE-2026-108467: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an authorized attacker to execute code over a network...

PT-2026-112670

Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description An issue in the Windows Win32 Kernel Subsystem allows an authorized attacker to locally disclose sensitive system information to an unauthorized control sphere...

PT-2026-112884

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69918: Windows Core Messaging Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83636: Windows Hyper-V Denial of Service Vulnerability

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...

CVE-2026-70280: Incorrect Authorization

Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally...

PT-2026-112070

Name of the Vulnerable Software and Affected Versions Windows Network File System affected versions not specified Description An out-of-bounds read in the Windows Network File System allows an authorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds re...

PT-2026-112264

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description An issue exists where resources are allocated without limits or throttling, which allows an unauthorized attacker to cause a denial of service over a network. Recommendations At the...

PT-2026-111974

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An elevation of privilege issue exists in the Network Driver Interface Specification NDIS due to a failure in ndis.sys to verify buffer length before copying memory. A local attacke...

PT-2026-112688

Name of the Vulnerable Software and Affected Versions Windows Registry affected versions not specified Description An authorized attacker can elevate privileges locally due to improper link resolution before file access, a condition known as link following, within the Windows Registry...

CVE-2026-109607: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file adminpanel/admin/query/loginExe.php of the component Login Endpoint. This manipulation of the argument username/pass causes sql injection. It is possible to initiate the attack remotely. Th...

CVE-2026-105390: Improper Resource Locking

Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive...

CVE-2026-69915: Use After Free

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85336: Windows Device Association Service Information Disclosure Vulnerability

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally...

CVE-2026-69733: Untrusted Search Path

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...

PT-2026-112632

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A heap-based buffer overflow exists in Windows Push Notifications. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occu...

PT-2026-112060

Name of the Vulnerable Software and Affected Versions Windows Program Compatibility Assistant Service affected versions not specified Description A use-after-free condition in the Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-109519: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template Rendering. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The...