PT-2026-111902

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

CVE-2026-109403: Server-Side Request Forgery (SSRF)

A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the file ai/src/main/java/org/conductoross/conductor/ai/a2a/A2AService.java of the component Agent Card Fetching. Executing a manipulation of the...

PT-2026-111966

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack...

PT-2026-112221

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85343: Windows Hyper-V Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2026-70165: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-111379

Name of the Vulnerable Software and Affected Versions SIMATIC WinCC versions 7.5 SIMATIC WinCC versions prior to 8.0 Update 11 SIMATIC WinCC versions prior to 8.1 Update 7 Description The application does not sufficiently restrict permissions assigned to a database role. This flaw allows an...

Microsoft Windows: CVE-2026-83852: Windows Bind Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

PT-2026-112656

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack...

Microsoft Windows: CVE-2026-88226: Windows Storage Port Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack...

CVE-2026-70196: Inefficient Algorithmic Complexity

Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network...

CVE-2026-83640: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...

Microsoft Windows: CVE-2026-96944: Windows Storage Information Disclosure Vulnerability

Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83510: Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

PT-2026-111311

Name of the Vulnerable Software and Affected Versions Wavlink WL-WN592AX6 version 250422 Description A flaw in the wmapd Daemon allows for remote OS command injection. The issue resides within the system function, enabling an attacker to execute arbitrary operating system commands without...

PT-2026-112167

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A use-after-free condition exists in Windows Hyper-V, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when a...

CVE-2026-88147: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...

CVE-2026-87700: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96859: Windows Imaging Component Information Disclosure Vulnerability

Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-97793: Windows Setup and Deployment Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...