CVE-2026-62711: Use After Free

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-72694: Improper Link Resolution Before File Access

A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the attacker can trick...

CVE-2026-72694: Improper Link Resolution Before File Access

A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the attacker can trick...

PT-2026-70679

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An out-of-bounds read in Windows NTFS allows an authorized attacker to disclose sensitive information locally, which can affect the system. Recommendations At the moment, there is no...

PT-2026-70569

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read exists in Microsoft Office, which could allow an unauthorized attacker to disclose information locally. An out-of-bounds read occurs when the software reads dat...

CVE-2026-62734: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-59126: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Event Logging Service allows an authorized attacker to elevate privileges locally...

PT-2026-70522

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A heap-based buffer overflow occurs in Windows Shell, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that...

CVE-2026-68821: Improper Privilege Management

Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-61929: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-61348: Use After Free

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

PT-2026-70451

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description An out-of-bounds read in the Windows DWM Core Library allows an authorized attacker to disclose sensitive information locally, which may affect the system. Recommendations At...

PT-2026-70243

Name of the Vulnerable Software and Affected Versions TCG TPM 2.0 reference code affected versions not specified Description An information leakage issue exists that allows a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key, such as an...

PT-2026-70450

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A type confusion issue occurs in the Windows DWM Core Library, where a resource is accessed using an incompatible type. This allows an authorized attacker to elevate privileg...

PT-2026-70695

Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description A relative path traversal issue allows an unauthorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no information about a newer versio...

PT-2026-70460

Name of the Vulnerable Software and Affected Versions Windows MIDI Service Module affected versions not specified Description A race condition occurs in the Windows MIDI Service Module due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate...

PT-2026-70538

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description An out-of-bounds read in Windows Win32K allows an authorized attacker to disclose sensitive information locally, which may affect the system. Recommendations At the moment, there is no...

CVE-2026-62726: Use After Free

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62735: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally...

PT-2026-70909

Name of the Vulnerable Software and Affected Versions SonicWall Email Security affected versions not specified Description An improper control of code generation allows an authenticated attacker with access to the restricted CLI to perform a local privilege escalation. By injecting arbitrary OS...