CVE-2026-96918: Incorrect Authorization

Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-87695: Inclusion of Functionality from Untrusted Control Sphere

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83718: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-69635: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack...

Beyond Maliciousness: Static and Runtime Attack-Surface Profiling of Agent Skills

Agent skills are Markdown documents that a tool-using agent reads as instructions and then acts on with the privileges of the session that loaded them. Installing one grants authority the standing to direct the agent, not new privilege, and the size of that grant is what we measure. We present a...

CVE-2026-83898: Out-of-bounds Read

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70164: Windows TCP/IP Elevation of Privilege Vulnerability

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-102202: Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability

Improper access control in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

PT-2026-112442

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS Deduplication Service affected versions not specified Description Weak authentication in the Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locall...

Microsoft Windows: CVE-2026-83737: Windows NTFS Information Disclosure Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-108266

Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certificate public key and client nonce but not to the active TLS...

Microsoft Windows: CVE-2026-70139: Windows Update Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70052: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows PowerShell allows an authorized attacker to execute code locally...

CVE-2026-100207: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an os command 'os command injection' in Azure CycleCloud allows an authorized attacker to execute code locally...

CVE-2026-96216: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-83776: Out-of-bounds Read

Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack...

Microsoft Windows: CVE-2026-69840: Windows Certificates Elevation of Privilege Vulnerability

Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally...

CVE-2026-97799: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally...

PT-2026-112913

Name of the Vulnerable Software and Affected Versions Windows DCOM Server affected versions not specified Description A race condition occurs in the Windows DCOM Server due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally. ...

CVE-2026-83798: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally...