Windows File History Service Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally...

Windows MIDI Service Module Elevation of Privileges Vulnerability

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

Active Directory Domain Services Elevation of Privilege Vulnerability

Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally...

Windows USB Print Driver Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows App Store Information Disclosure Vulnerability

Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information locally...

Windows Media Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally...

Microsoft Office Information Disclosure Vulnerability

Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally...

Windows Media Elevation of Privilege Vulnerability

Use after free in Windows Media allows an authorized attacker to elevate privileges locally...

Windows USB Hub Driver Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally...

Netlogon RPC Elevation of Privilege Vulnerability

Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally...

Windows Runtime Elevation of Privilege Vulnerability

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...

kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete

A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...

PT-2026-58340

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A numeric truncation error in the Windows Resilient File System ReFS allows an authorized attacker to execute code locally, potentially enabling local privilege...

PT-2026-58274

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows Server 2025 affected versions not specified Description A use after free issue in the Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally, potentially granti...

PT-2026-58148

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use-after-free condition in the Windows Kernel allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment,...

PT-2026-58715

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to perform local tampering. This occurs when the system does not properly validate symbol...

PT-2026-58564

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description An out-of-bounds read allows an unauthorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs when the software reads data past...