PT-2026-58425

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow exists in Windows NTFS, which could allow an unauthorized attacker to execute code locally. This issue requires user interaction to be triggered...

PT-2026-58673

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally...

PT-2026-58662

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A use-after-free issue exists in the Windows Cloud Files Mini Filter Driver, specifically within the CldiStreamCompleteRequest function. This flaw allows an...

PT-2026-58654

Access of resource using incompatible type 'type confusion' in Windows DWM allows an authorized attacker to elevate privileges locally...

PT-2026-58365

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

PT-2026-58374

Name of the Vulnerable Software and Affected Versions Windows Media affected versions not specified Description An issue in Windows Media allows an authorized attacker to locally disclose sensitive information, which can subsequently affect the system. Recommendations At the moment, there is no...

PT-2026-58498

Use after free in Windows Media allows an authorized attacker to elevate privileges locally...

PT-2026-58512

Name of the Vulnerable Software and Affected Versions Windows Active Directory affected versions not specified Windows MSMQ affected versions not specified Description An integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally...

PT-2026-58326

Name of the Vulnerable Software and Affected Versions Windows Media affected versions not specified Description A heap-based buffer overflow occurs in Windows Media, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that...

PT-2026-58235

Name of the Vulnerable Software and Affected Versions Quality Windows Audio/Video Experience QWAVE service affected versions not specified Description A use-after-free condition in the Quality Windows Audio/Video Experience QWAVE service allows an authorized attacker to elevate privileges locally...

PT-2026-58205

Name of the Vulnerable Software and Affected Versions Windows Clip Service affected versions not specified Description A race condition occurs in the Windows Clip Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally...

PT-2026-58186

Name of the Vulnerable Software and Affected Versions Windows Spaceport.sys affected versions not specified Description An integer overflow or wraparound exists in the Spaceport.sys driver. This issue allows an unauthorized attacker with physical access to the system to elevate their privileges t...

PT-2026-58274

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows Server 2025 affected versions not specified Description A use after free issue in the Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally, potentially granti...

PT-2026-58715

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to perform local tampering. This occurs when the system does not properly validate symbol...

PT-2026-58264

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally...

PT-2026-58531

Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally...

PT-2026-58131

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Improper neutralization of special elements used in an SQL command, known as SQL injection, allows an authorized attacker to elevate privileges locally. SQL injection is a technique where...

PT-2026-58608

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs when the software reads data past...

PT-2026-58188

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Windows Desktop Window Manager affected versions not specified Description An integer underflow wrap or wraparound in the Windows Kernel allows an authorized attacker to disclose information...

PT-2026-58753

NVIDIA TensorRT-LLM for any platform contains a vulnerability in the gRPC server chat API endpoint, where an attacker could cause CWE-20 by local attack. A successful exploit of this vulnerability might lead to denial of service...