Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnerability

Use after free in Microsoft NAT Helper Components ipnathlp.dll allows an authorized attacker to elevate privileges locally...

Windows Bluetooth Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...

Windows DNS Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally...

Windows Overlay Filter Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

DirectX Graphics Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally...

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

Windows Runtime Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

Windows Media Elevation of Privilege Vulnerability

Use after free in Windows Media allows an authorized attacker to elevate privileges locally...

CVE-2026-49170: Insufficient Granularity of Access Control

Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

CVE-2026-50367: Incorrect Access of Indexable Resource

Incorrect access of indexable resource 'range error' in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-50305: Use After Free

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2026-50407: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2026-57095: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally...

PT-2026-58417

Name of the Vulnerable Software and Affected Versions Microsoft PC Manager versions prior to 3.22.1.0 Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally. Recommendations Update to version 3.22.1.0 via...

CVE-2026-50413: Use After Free

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-56183: Use After Free

Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-58547: Heap-based Buffer Overflow

Heap-based buffer overflow in Universal Plug and Play upnp.dll allows an authorized attacker to elevate privileges locally...

CVE-2026-57093: Use After Free

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-50361: Double Free

Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2026-49806: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...