291903 matches found
PT-2026-113447
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...
PT-2026-113237
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...
PT-2026-112738
Name of the Vulnerable Software and Affected Versions Windows Phone Service affected versions not specified Description A race condition exists in the Windows Phone Service, where concurrent execution using a shared resource occurs without proper synchronization. This flaw allows an authorized...
PT-2026-112352
Improper link resolution before file access 'link following' in Microsoft Defender allows an authorized attacker to disclose information locally...
PT-2026-112741
Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use after free issue exists in Windows Installer. This allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...
PT-2026-112708
Name of the Vulnerable Software and Affected Versions Windows Advanced Rasterization Platform affected versions not specified Description A use after free issue exists in the Windows Advanced Rasterization Platform. This flaw allows an authorized attacker to elevate privileges locally. Use after...
PT-2026-112002
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
PT-2026-113135
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...
PT-2026-113227
Heap-based buffer overflow in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...
PT-2026-113548
Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive...
PT-2026-113226
Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...
PT-2026-112663
Name of the Vulnerable Software and Affected Versions Windows Direct Composition affected versions not specified Description A heap-based buffer overflow exists in Windows Direct Composition. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occu...
PT-2026-111883
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...
PT-2026-111884
Improper neutralization of special elements used in an os command 'os command injection' in Azure CycleCloud allows an authorized attacker to execute code locally...
PT-2026-112486
Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally...
PT-2026-112004
Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally...
PT-2026-112702
Name of the Vulnerable Software and Affected Versions Windows Telephony Server affected versions not specified Description A use after free issue in Windows Telephony Server allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...
PT-2026-111924
Access of resource using incompatible type 'type confusion' in Windows StateRepository API allows an authorized attacker to elevate privileges locally...