PT-2026-58431

Name of the Vulnerable Software and Affected Versions Windows AppResolver affected versions not specified Description An authorization flaw in the Windows AppResolver allows for local privilege escalation. An attacker can exploit this issue to bypass container isolation, moving from a...

PT-2026-58200

Name of the Vulnerable Software and Affected Versions Windows Audio Compression Manager affected versions not specified Description Improper access control in the Windows Audio Compression Manager ACM allows an authorized attacker to elevate privileges locally. Recommendations Install update...

PT-2026-58178

Name of the Vulnerable Software and Affected Versions Windows USB Print Driver affected versions not specified Description A race condition occurs in the Windows USB Print Driver due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges...

PT-2026-58174

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows Server 2025 affected versions not specified Description A race condition exists in the Windows USB Print Driver. This occurs when concurrent execution using a shared resource happens with...

PT-2026-58500

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

PT-2026-58202

Name of the Vulnerable Software and Affected Versions Microsoft Windows App Store affected versions not specified Description A race condition occurs when multiple processes access a shared resource concurrently without proper synchronization. In the Microsoft Windows App Store, this flaw allows ...

PT-2026-58322

Name of the Vulnerable Software and Affected Versions Windows Application Model affected versions not specified Description A use after free issue in the Windows Application Model allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs...

PT-2026-58124

Name of the Vulnerable Software and Affected Versions Windows Secure Kernel Mode affected versions not specified Description Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

PT-2026-58273

Name of the Vulnerable Software and Affected Versions Virtual Hard Disk VHD Miniport Driver affected versions not specified Description A heap-based buffer overflow occurs in the Virtual Hard Disk VHD Miniport Driver. This issue allows an authorized attacker to elevate privileges locally and affe...

PT-2026-58436

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use after free issue in the Windows Kernel allows an unauthorized local attacker to elevate their privileges from a standard user to a higher level of access. Recommendations Install...

ALSA-2026:39296 Moderate: libinput security update

libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. Security Fixes: libinput: local privilege escalation via crafted uinput devices CVE-2026-50292 For more details about the security issues, including the impac...

PT-2026-58497

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description A race condition occurs in Windows Media when shared resources are executed concurrently without proper synchronization. This flaw allows an authorized attacker to elevate their privileges...

Microsoft PC Manager < 3.21.6.0 Elevation of Privilege (CVE-2026-58636) (July 2026)

The Windows 'Microsoft PC Manager' app installed on the remote host is prior to 3.21.6.0. It is, therefore, affected by an elevation of privilege vulnerability: - A local privilege escalation vulnerability allows an authenticated attacker to gain elevated privileges on the system. CVE-2026-58636...

KB5099540: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (July 2026)

The remote Windows host is missing security update 5099540. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally...

PT-2026-58389

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free condition in the Windows Runtime allows an authorized attacker to elevate privileges locally. A use-after-free is a memory corruption issue that occurs when an application...

PT-2026-58370

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This flaw allows an authorized local attacker to elevate their privileges to the kernel level...

PT-2026-58601

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description A use after free issue in the Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

PT-2026-58669

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A use-after-free condition in Windows Win32K allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...

PT-2026-58126

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A race condition exists in Windows Push Notifications, where concurrent execution using a shared resource with improper synchronization allows an authorized attacker to...