CVE-2026-6192

A flaw was found in uclouvain openjpeg. A local attacker can exploit an integer overflow vulnerability within the opjpiinitialiseencode function. This manipulation can lead to a Denial of Service DoS, making the affected system or application unavailable...

CVE-2026-3842

A flaw was found in QEMU. This vulnerability allows a local attacker within a guest virtual machine to write data beyond its allocated memory. This occurs when cpuphysicalmemorymap returns a shorter length than expected, leading to an out-of-bounds write. Successful exploitation could result in...

CVE-2026-33793

An Execution with Unnecessary Privileges vulnerability in the User Interface UI of Juniper Networks Junos OS and Junos OS Evolved allows a local, low-privileged attacker to gain root privileges, thus compromising the system. When a configuration that allows unsigned Python op scripts is present o...

PT-2026-32863

Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description Improper access control in the Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

PT-2026-32822

Name of the Vulnerable Software and Affected Versions Desktop Window Manager affected versions not specified Description A use after free issue allows an authorized attacker to elevate privileges locally. Use after free is a condition where a program continues to use a pointer after it has been...

PT-2026-32862

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A double free issue in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally. A double free occurs when a program attempts to fre...

PT-2026-32843

Name of the Vulnerable Software and Affected Versions Microsoft 365 Apps for Enterprise versions 16.0.1 through 16.0.1 Description An out-of-bounds read in Microsoft Office Excel allows an unauthorized local attacker to disclose sensitive information. This occurs when a user opens a malicious Exc...

PT-2026-32738

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Licensing Service affected versions not specified Description A missing authentication for a critical function in the Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally,...

PT-2026-32793

Name of the Vulnerable Software and Affected Versions Windows GDI affected versions not specified Description An out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs when a program reads dat...

PT-2026-32743

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A double free issue in Windows Shell allows an authorized attacker to elevate privileges locally, enabling a user to gain administrative access to the system. Recommendations At the...

PT-2026-32717

CVE-2026-20806 Access of resource using incompatible type 'type confusion' in Windows COM allows an authorized attacker to disclose information locally. https://t.co/pPGYfQ4IPk...

PT-2026-32775

Name of the Vulnerable Software and Affected Versions Windows BitLocker affected versions not specified Description Improper input validation in Windows BitLocker allows an unauthorized attacker to bypass a security feature, specifically Secure Boot, locally. This issue poses a risk to data...

PT-2026-32794

CVE-2026-32068 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SSDP Service allows an authorized attacker to elevate privilege… https://t.co/txSwKIdsD7...

PT-2026-32716

Name of the Vulnerable Software and Affected Versions Windows Boot Loader affected versions not specified Description Reliance on untrusted inputs in a security decision allows an authorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information abou...

PT-2026-32789

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description A race condition occurs due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate privileges...

Missing Authentication for critical function in CAPWAP daemon

...

PT-2026-54338

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description An out of bounds read in the Chromecast component allows a local attacker to obtain potentially sensitive information from process memory through the use of malicious network traffic. A...

PT-2026-32761

🪟 Projected File System EoP CVE-2026-26184 — because nothing says “safe sharing” like letting Windows privilege itself. Patch now: thin details = attackers fill in the blanks. https://t.co/6drID0tklA WindowsSecurity PrivilegeEscalation ProjectedFileSystem Cve202626184 https://t.co/tM3GbnJNon...

PT-2026-32798

CVE-2026-32072 Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally. https://t.co/LqmmLGYoRL...

PT-2026-32786

Name of the Vulnerable Software and Affected Versions Desktop Window Manager affected versions not specified Description A use after free issue allows an authorized attacker to elevate privileges locally. Use after free occurs when an application continues to use a pointer after it has been freed...