Adobe Reader < 26.001.21431 Multiple Vulnerabilities (APSB26-44)

The version of Adobe Reader installed on the remote Windows host is a version prior to 26.001.21431. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Obje...

PT-2026-33229

Name of the Vulnerable Software and Affected Versions goshs versions prior to 2.0.0-beta.6 Description goshs contains an SFTP root escape caused by prefix-based path validation. An authenticated SFTP user can read from and write to filesystem paths outside the configured SFTP root, breaking the...

Microsoft Brokering File System Resource Management Vulnerability

The Microsoft Brokering File System is a file system developed by Microsoft Corporation. There is a resource management vulnerability in the Microsoft Brokering File System. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are affected: Windo...

PT-2026-32758

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A use after free issue in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that...

Microsoft Windows Common Log File System Driver Resource Management Error Vulnerability

The Microsoft Windows Common Log File System Driver is a high-performance, general-purpose log file system API provided by Microsoft. It allows specialized client applications to utilize this subsystem, enabling multiple clients to share it for optimized log access. There is a resource management...

CVE-2026-34626: Improperly Controlled Modification of Object Prototype Attributes

Acrobat Reader versions 26.001.21411, 24.001.30360, 24.001.30362 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' vulnerability that could result in arbitrary file system read in the context of the current user. Exploitation of...

PT-2026-32705

Name of the Vulnerable Software and Affected Versions Acrobat Reader versions prior to 26.001.21412 Description An Improperly Controlled Modification of Object Prototype Attributes, also known as Prototype Pollution a flaw where an attacker can manipulate the prototype of an object to inject...

PT-2026-32796

CVE-2026-32070 Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. https://t.co/LTdrTi0Kff...

Microsoft Projected File System Resource Management Vulnerability

The Microsoft Projected File System is an application system developed by Microsoft Corporation. It projects hierarchical data into the file system, making it appear as files and directories within the file system. There is a resource management vulnerability in the Microsoft Windows Projected Fi...

KLA90980 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, read local files, spoof user interface. Below is a...

CVE-2026-32070: Use After Free

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-32074: Double Free

Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-32091: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

CVE-2026-27927: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-26181: Use After Free

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

PT-2026-32733

CVE-2026-26153 Out-of-bounds read in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges locally. https://t.co/JzUOIc3hba...

PT-2026-32862

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A double free issue in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. A double free occurs when a program attempts to fre...

PT-2026-32789

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description A race condition occurs due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate privileges...

PT-2026-32795

CVE-2026-32069 Double free in Windows Projected File System allows an authorized attacker to elevate privileges locally. https://t.co/kQ5AJH4xyH...

PT-2026-32817

🪟 CVE-2026-32091 is Microsoft doing “local admin? nah, brokering says hi.” File-system boundary breaks mean normal users become SYSTEM—so patch fast. Your PC isn’t a vault. https://t.co/sP4cfWdFlj BrokeringFileSystem LocalPrivilegeEscalation WindowsVulnerability https://t.co/qNgRX2zQ6g...