Microsoft Windows: CVE-2026-70241: Windows Kerberos Elevation of Privilege Vulnerability

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

Microsoft .NET: CVE-2026-70165: .NET Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-69763: Use After Free

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

PT-2026-112608

Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

UBUNTU-CVE-2026-96231

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-111899

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An authorized attacker can locally disclose sensitive information due to the use of an uninitialized resource within the Windows Kernel. This issue allows attackers to obtain sensitive...

Microsoft Windows: CVE-2026-83504: Windows SmartScreen Information Disclosure Vulnerability

Time-of-check time-of-use toctou race condition in Windows SmartScreen allows an authorized attacker to disclose information locally...

PT-2026-112014

Name of the Vulnerable Software and Affected Versions Windows Backup Engine affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the...

CVE-2026-102202: Improper Link Resolution Before File Access

Improper access control in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-83712: Out-of-bounds Write

Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally...

PT-2026-112218

Name of the Vulnerable Software and Affected Versions Windows Spaceport.sys affected versions not specified Description A use-after-free condition in the Spaceport.sys driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when ...

CVE-2026-70140: Use After Free

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-103554: Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69651: Inefficient Algorithmic Complexity

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-113240

Name of the Vulnerable Software and Affected Versions OpenSSH for Windows affected versions not specified Description A double free issue exists that allows an authorized attacker to elevate privileges locally. A double free occurs when the program attempts to free the same memory location twice,...

Microsoft Windows: CVE-2026-83691: Windows DHCP Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

PT-2026-112181

Name of the Vulnerable Software and Affected Versions Windows SmartScreen affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to elevate privileges locally on the system. Recommendatio...

Microsoft Windows: CVE-2026-69798: Windows Wired AutoConfig Service Elevation of Privilege Vulnerability

Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69506: Out-of-bounds Read

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

CVE-2026-108959: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.0. This impacts an unknown function of the file /addtransacdetail.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...