CVE-2026-69385: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

CVE-2026-69617: Out-of-bounds Read

Out-of-bounds read in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2026-56198: Out-of-bounds Read

Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker to elevate privileges locally...

CVE-2026-69694: Deserialization of Untrusted Data

Deserialization of untrusted data in Windows IP Address Management IPAM Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69265: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69473: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-88217

In multiple locations, there is a possible unauthorized URI access due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-83979: Use After Free

Use after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69612: Absolute Path Traversal

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69362: Use After Free

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-88446

Name of the Vulnerable Software and Affected Versions OpenTelemetry.Resources.Host versions prior to 1.16.0-beta.2 Description An untrusted search path issue exists on macOS. The host.id resource attribute detector executes the sh and ioreg binaries using their bare names instead of absolute path...

CVE-2026-69846: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

PT-2026-87287

Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally...

CVE-2026-69392: Use After Free

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-83995: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69472: Use After Free

Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally...

PT-2026-87265

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69517: Use After Free

Use after free in Windows Wireless Networking allows an authorized attacker to elevate privileges locally...

CVE-2026-81354: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

PT-2026-87302

Name of the Vulnerable Software and Affected Versions Microsoft Standard XPS affected versions not specified Description A heap-based buffer overflow occurs in Microsoft Standard XPS, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...