Microsoft Windows: CVE-2026-83848: Windows COM+ Event System Service Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70116: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to bypass a security feature with a physical attack...

Microsoft Windows: CVE-2026-83837: Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2026-105006: Use After Free

Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack...

PT-2026-113105

Name of the Vulnerable Software and Affected Versions Windows Security Account Manager affected versions not specified Description A missing authentication flaw in a critical function allows an authorized attacker to perform local tampering, which can affect the system. Recommendations At the...

PT-2026-111424

Name of the Vulnerable Software and Affected Versions macrozheng mall versions prior to 1.0.4 Description A business logic error exists in the mall-portal component. A remote attacker can manipulate the coupon amount or pay amount arguments within the OmsPortalOrderServiceImpl function of the...

Microsoft Windows: CVE-2026-85821: Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

CVE-2026-88127: Use After Free

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally...

CVE-2026-83716: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...

Microsoft Windows: CVE-2026-70063: Windows Kernel Information Disclosure Vulnerability

Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2026-69884: Buffer Over-read

Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally...

PT-2026-113084

Name of the Vulnerable Software and Affected Versions Windows USB Print Driver affected versions not specified Description A use-after-free condition exists in the Windows USB Print Driver. This allows an authorized attacker to elevate privileges locally on the system. Use-after-free is a memory...

Microsoft Windows: CVE-2026-83749: Windows Overlay Filter Elevation of Privilege Vulnerability

Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

PT-2026-112740

Improper control of generation of code 'code injection' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70262: WebDAV Elevation of Privilege Vulnerability

Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-96314: Windows Audio Service Information Disclosure Vulnerability

Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally...

CVE-2026-69387: Use After Free

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-111525

A flaw has been found in HBAI-Ltd Toonflow-app up to 1.1.8. The affected element is the function child process.exec of the file src/routes/setting/fileManagement/openFolder.ts of the component Open Folder Endpoint. Executing a manipulation of the argument path can lead to command injection. The...

Microsoft Windows: CVE-2026-49785: UEFI Secure Boot Security Feature Bypass Vulnerability

Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-83776: Windows Bluetooth Driver Elevation of Privilege Vulnerability

Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack...