PT-2026-87352

Name of the Vulnerable Software and Affected Versions Windows USB Audio Class driver usbaudio.sys affected versions not specified Description A heap-based buffer overflow occurs in the usbaudio.sys driver. This issue allows an authorized attacker to elevate privileges locally on the system. A...

PT-2026-88112

Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69790: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally...

PT-2026-87498

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use after free issue in the Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application...

CVE-2026-69323: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72988: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-71353: Double Free

Double free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

CVE-2026-69584: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows USB Video Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69432: Heap-based Buffer Overflow

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69324: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

PT-2026-88215

In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88262

In stpropnci process std of stpropnci std.cc, there is a possible memory safety issue due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-69693: Use After Free

Use after free in Windows Device Association Broker service allows an authorized attacker to elevate privileges locally...

PT-2026-88257

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A missing bounds check in the openLogicalChannel function across multiple files allows for an out-of-bounds write. This condition can be leveraged to achieve loc...

CVE-2026-69279: Use After Free

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70574: Out-of-bounds Read

Out-of-bounds read in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

PT-2026-88226

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description An issue exists in the onActivityResult function of AppWidgetConfigActivityProxy.java where a confused deputy scenario allows for an unauthorized URI permission...

CVE-2026-69295: Out-of-bounds Read

Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally...

PT-2026-87407

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

PT-2026-87819

Name of the Vulnerable Software and Affected Versions Windows Services for NFS affected versions not specified Description A use-after-free condition exists in the ONCRPC XDR Driver. This issue allows an authorized local attacker or a remote attacker to execute arbitrary code and affect the syste...