CVE-2026-69368: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-69389: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally...

CVE-2026-78457: Use After Free

Use after free in Windows Security App allows an authorized attacker to elevate privileges locally...

CVE-2026-71351: Double Free

Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

CVE-2026-69838: Use After Free

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-70581: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69348: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-69799: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69814: Use After Free

Use after free in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

PT-2026-87783

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-69478: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83980: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

PT-2026-88250

In tt face colr blend layer of ttcolr.c, there is a possible remote code execution due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-69561: Out-of-bounds Read

Out-of-bounds read in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69379: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69725: Double Free

Double free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69269: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally...

PT-2026-88241

Name of the Vulnerable Software and Affected Versions StorageManagerService affected versions not specified Description An unsafe PendingIntent in the getManageSpaceActivityIntent function of StorageManagerService.java allows for a LaunchAnyWhere chain. This issue could enable local escalation of...

CVE-2026-81963: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...

PT-2026-87528

Name of the Vulnerable Software and Affected Versions Windows MIDI Service Module affected versions not specified Description A stack-based buffer overflow occurs in the Windows MIDI Service Module. This issue allows an authorized attacker to elevate privileges locally on the system. A stack-base...