Microsoft Windows win32full Improper Release Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

PT-2026-24333

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description A flaw in .NET allows an authorized attacker to gain elevated privileges on a local system. The March 2026 Patch Tuesday addressed this issue, fixing 79 flaws including two zero-day...

PT-2026-24311

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A flaw exists in the Winlogon login program of Windows operating systems related to incorrect handling of symbolic links during file access. Exploitation of this issue could allow an...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from a race condition in the vpuopeninst function in vpuioctl.c. This race condition leads to the reuse of resources after release, potentially allowing for local privilege escalati...

PT-2026-24272

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A race condition exists in the Microsoft Graphics Component due to improper synchronization when handling concurrent execution with shared resources. This allows a local attacker to...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability. This vulnerability stems from the lack of boundary checks in the DeviceId function within DeviceId.java, which results in persistent data synchronization issues. This may lead to an increase in...

Fortinet FortiClient Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Fortinet FortiClient. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of...

PT-2026-24452

In EfwApTransport::ProcessRxRing of efw ap transport.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Fortinet FortiClientLinux 安全漏洞

Fortinet FortiClientLinux is a security client software developed by the American company Fortinet. There are security vulnerabilities in versions 7.4.0 to 7.4.4 of Fortinet FortiClientLinux, as well as in versions 7.2.2 to 7.2.12 of FortiClientLinux. These vulnerabilities stem from UNIX symbolic...

PT-2026-24294

Use after free in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally...

PT-2026-24270

Уязвимость расширения для управления виртуальными машинами Azure Azure Diagnostics для Linux Virtual Machines связана с переполнением буфера в динамической памяти. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

PT-2026-24274

🚨 CVE-2026-23671 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth RFCOM Protocol Driver allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

Google Pixel 安全漏洞

The Google Pixel is a smartphone produced by Google Inc. The Google Pixel has a security vulnerability, which stems from the lack of boundary checks in the EfwApTransport::ProcessRxRing function, leading to out-of-bound writing and potentially allowing for local privilege escalation...

PT-2026-24331

Name of the Vulnerable Software and Affected Versions Windows 10 Version 1607 Windows Server 2025 Windows Server 2011 Description Improper authentication in the Windows SMB Server allows an authorized attacker to elevate privileges locally. The issue involves a Kerberos reflection bypass, which c...

📄 VirtualBox 7.0.16 Local Privilege Escalation / Race Condition

VirtualBox version 7.0.16 proof of concept local privilege escalation exploit that leverages a race condition vulnerability. ============================================================================================================================================= | Title : VirtualBox 7.0.16...

PT-2026-24335

Уязвимость пакета программ Microsoft Office связана с целочисленным переполнением. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии...

Ivanti Desktop and Server Management 安全漏洞

Ivanti Desktop and Server Management Ivanti DSM is a multi-platform unified endpoint management solution provided by the American company Ivanti. Versions of Ivanti Desktop and Server Management prior to 2026.1.1 contained security vulnerabilities. These vulnerabilities were due to exposed...

Microsoft Windows win32full Improper Release Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull...

PT-2026-24292

Null pointer dereference in Windows Performance Counters allows an authorized attacker to elevate privileges locally...

PT-2026-24283

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A use-after-free condition exists in the Windows Kernel. Successful exploitation could allow an attacker to gain elevated privileges on a local system. Recommendations At the moment...