Microsoft Windows: CVE-2026-85825: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-85825: Concurrent Execution using Shared Resource with Improper Synchronization

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85824: Windows Composite Image File System Elevation of Privilege Vulnerability

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally...

PT-2026-112787

Name of the Vulnerable Software and Affected Versions Windows exFAT File System affected versions not specified Description A heap-based buffer overflow occurs in the Windows exFAT File System. This issue allows an authorized attacker to elevate privileges locally, potentially granting them...

Microsoft Windows: CVE-2026-85822: Windows exFAT File System Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally...

CVE-2026-85822: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85823: Windows Composite Image File System Elevation of Privilege Vulnerability

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally...

CVE-2026-85823: Use After Free

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally...

PT-2026-111462

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description A use-after-free issue exists in the Storage: Bucket File System component. Use-after-free is a...

CVE-2026-109741: Use After Free

Use-after-free in the Storage: Bucket File System component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

Microsoft Windows: CVE-2026-84009: Windows Projected File System Tampering Vulnerability

Time-of-check time-of-use toctou race condition in Windows Projected File System allows an authorized attacker to perform tampering locally...

CVE-2026-85931: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...

CVE-2026-85328: Weak Authentication

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...

PT-2026-112766

Name of the Vulnerable Software and Affected Versions Windows Distributed File System DFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Distributed File System DFS, which allows an authorized attacker to execute arbitrary code over a network and...

CVE-2026-85798: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-85328: Windows Projected File System Elevation of Privilege Vulnerability

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83513: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

PT-2026-113152

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A use-after-free condition in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges...

CVE-2026-106634: Improper Limitation of a Pathname to a Restricted Directory

Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in arbitrary file system write. A low-privileged attacker could leverage this vulnerability to write files to unauthorized locations on the file...

CVE-2026-103820: Improper Limitation of a Pathname to a Restricted Directory

CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in an arbitrary file system write. An attacker could leverage this vulnerability to write to unauthorized files or directories outside of intended...