PT-2026-116155

🚨 CVE-2026-108576 A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function process ping of the component IPPingDiagnostics Handler. The manipulation of the argument Host results in os command injection. The attack can be launched remotely. The vendor was...

Microsoft Windows: CVE-2026-70216: Windows Mobile Device Management Tampering Vulnerability

Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-70235: Windows Event Tracing Spoofing Vulnerability

Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally...

CVE-2026-69675: Out-of-bounds Read

Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83708: Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-105729: Untrusted Pointer Dereference

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87708: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2026-112206

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description Improper access control in the Windows Projected File System allows an authorized attacker to locally disclose sensitive information, which can affect the system...

Microsoft Windows: CVE-2026-83639: Windows Sensor Data Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83788: Windows rndismp6.sys Information Disclosure Vulnerability

Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-85831: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96916: Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-113452

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An integer overflow or wraparound occurs, allowing an authorized attacker to elevate privileges locally and affect the system. An integer overflow is a condition where an arithmetic...

Microsoft Windows: CVE-2026-96118: Windows Graphics Kernel Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-85857: Insertion of Sensitive Information into Log File

Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...

PT-2026-112075

Name of the Vulnerable Software and Affected Versions Windows Credential Manager affected versions not specified Description An issue exists where concurrent execution using a shared resource with improper synchronization, known as a race condition, allows an authorized attacker to elevate...

PT-2026-112678

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free issue in the Advanced Local Procedure Call ALPC mechanism allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs...

CVE-2026-58280: Uncontrolled Recursion

Uncontrolled recursion in .NET allows an unauthorized attacker to deny service over a network...

CVE-2026-96848: Buffer Over-read

Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96917: Windows PCI Bus Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally...