CVE-2026-96224

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-70190

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-112469

Name of the Vulnerable Software and Affected Versions Windows User Profile Service affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At t...

PT-2026-112441

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description The use of an externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information abou...

PT-2026-112377

Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description An authorized attacker can locally disclose sensitive information due to the use of an uninitialized resource in the Windows Win32 Kernel Subsystem. Recommendations At...

CVE-2026-83775: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-88082: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-109827: Out-of-bounds Write

A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gfm2tsdecodeait of the file src/mediatools/ait.c of the component AIT Parser. Such manipulation leads to out-of-bounds write. The attack may be launched remotely. The exploit has been disclosed to the...

CVE-2026-69783: External Control of File Name or Path

External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-103578: Windows Kernel Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack...

Microsoft Windows: CVE-2026-109453: Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85930: Windows Image Acquisition Elevation of Privilege Vulnerability

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87706: Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83841: Windows Win32k Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85904: Windows Device Association Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

PT-2026-112904

Integer overflow or wraparound in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-85837: Out-of-bounds Read

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-96308: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2026-112801

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-69926: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Desktop Window Manager allows an authorized attacker to elevate privileges locally...