PT-2026-112633

Name of the Vulnerable Software and Affected Versions Microsoft Bluetooth Driver affected versions not specified Description A race condition exists in the Microsoft Bluetooth Driver. This occurs when concurrent execution using a shared resource lacks proper synchronization, allowing an authorize...

PT-2026-113228

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description Improper neutralization of argument delimiters in a command, known as argument injection, occurs in Windows Error Reporting. This issue allows an authorized standard user to...

PT-2026-113134

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-112731

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A use after free issue in the Windows Device Association Service allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption...

PT-2026-113238

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

PT-2026-113139

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

PT-2026-112655

Name of the Vulnerable Software and Affected Versions Windows Clipboard User Service affected versions not specified Description An issue in the Windows Clipboard User Service allows an authorized attacker to locally disclose sensitive system information to an unauthorized control sphere...

PT-2026-112442

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS Deduplication Service affected versions not specified Description Weak authentication in the Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locall...

PT-2026-113221

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

PT-2026-113229

Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally...

PT-2026-111883

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...

PT-2026-113042

Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31...

PT-2026-112040

Name of the Vulnerable Software and Affected Versions Windows UEFI affected versions not specified Description Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally. This issue specifically affects the UEFI Secure Boot security...

PT-2026-112027

Name of the Vulnerable Software and Affected Versions Windows Update Delivery Optimization affected versions not specified Description A use after free issue exists in Windows Update Delivery Optimization. This allows an authorized attacker to elevate privileges locally. Use after free is a memor...

CVE-2023-43871-WBCE-Arbitrary-File-Upload--XSS---Media

WBCE File Upload XSS - WBCE v1.6.1 Author: Sergio Description: File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden XSS. Attack Vectors: A vulnerability in Media file upload sanitation allows you to upload a PDF file with hidden XSS. POC: When logging...

CVE-2026-41091

🛡️ CVE-2026-41091 - RedSun Microsoft Defender Elevation of Privilege Vulnerability RedSun is a local privilege escalation LPE technique and associated PoC abusing a link-following vulnerability in Microsoft Defender's Malware Protection Engine. It allows a low-privileged authenticated attacker to...

CVE-2011-1249

CVE-2011-1249 🖥️ -h3x0v3rl0rd- Microsoft Windows x86 - 'afd.sys' Local Privilege Escalation MS11-046 apt install mingw-w64 i686-w64-mingw32-gcc 40564.c -o newshell.exe -lws232...

CVE-2026-108941

The Linketic CityGaussian software (versions up to 2.0 ) contains a code injection vulnerability within the Sidecar Parsing component. Specifically, the parse_cfg_args function in the internal/utils/common.py file is susceptible to exploitation because the manipulation of the cfg_args argument al...

CVE-2026-108941 Linketic CityGaussian Sidecar Parsing common.py parse_cfg_args code injection

A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parsecfgargs of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfgargs leads to code injection. The attack can only be performed from a local...

CVE-2021-4034

CVE-2021-4034 One day for the polkit privilege escalation exploit Just execute make, ./cve-2021-4034 and enjoy your root shell. The original advisory by the real authors is here PoC If the exploit is working you'll get a root shell immediately: vagrant@ubuntu-impish:/CVE-2021-4034$ make cc -Wall...