CVE-2026-83798: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally...

PT-2026-112805

Name of the Vulnerable Software and Affected Versions Windows Image Acquisition affected versions not specified Description The use of an externally-controlled format string allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no...

PT-2026-113101

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to locally disclose sensitive information a...

CVE-2026-83669: Use of Uninitialized Resource

Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-112582

Name of the Vulnerable Software and Affected Versions Windows RNDIS affected versions not specified Description A buffer over-read exists in Windows RNDIS, which allows an unauthorized attacker to disclose sensitive information through a physical attack. A buffer over-read occurs when a program...

CVE-2026-85866: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally...

PT-2026-112074

Name of the Vulnerable Software and Affected Versions Windows Update affected versions not specified Description An untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally, which can lead to a full system compromise. Recommendations At the moment, there...

CVE-2026-109156: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function extractenv of the file mlserver/env.py of the component environmenttarball Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The vendor was contacted early about th...

DevTools Suite DoS

The vulnerability in Google Chrome and Microsoft Edge DevTools web development tools is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Microsoft Windows: CVE-2026-69914: Windows AppX Deployment Service Information Disclosure Vulnerability

Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...

PT-2026-113100

Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description A time-of-check time-of-use toctou race condition exists in the Windows Win32 Kernel Subsystem. This occurs when a program checks the state of a resource before using i...

PT-2026-112815

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A use after free issue in the Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs whe...

CVE-2026-83507: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70017: Windows Secure Kernel Mode Information Disclosure Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally...

PT-2026-112327

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A use-after-free issue exists in the Windows Ancillary Function Driver for WinSock. This allows an authorized attacker to elevate privileges locally on t...

CVE-2026-70173: Out-of-bounds Read

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

PT-2026-112558

Name of the Vulnerable Software and Affected Versions Windows Input System affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to elevate privileges locally on the system...

PT-2026-112024

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue in the Windows Kernel allows an authorized attacker to locally disclose sensitive system information to an unauthorized control sphere. Recommendations At the moment, there is...

PT-2026-112713

Name of the Vulnerable Software and Affected Versions Windows Print Spooler Components affected versions not specified Description An authorized attacker can locally disclose information due to the use of an uninitialized resource within the Windows Print Spooler Components. Recommendations At th...

PT-2026-113226

Name of the Vulnerable Software and Affected Versions Windows Setup and Deployment affected versions not specified Description A missing authentication requirement for a critical function allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no...