CVE-2026-109756: Improper Privilege Management

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

Microsoft Windows: CVE-2026-87691: Windows Management Services Elevation of Privilege Vulnerability

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

PT-2026-111430

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description An issue exists in the Security: Process Sandboxing component that allows for information...

Microsoft Windows: CVE-2026-85359: Windows Performance Monitor Elevation of Privilege Vulnerability

Improper control of generation of code 'code injection' in Windows Performance Monitor allows an authorized attacker to elevate privileges locally...

PT-2026-112496

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Bind Filter Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based...

Microsoft Windows: CVE-2026-85850: Windows Kernel Elevation of Privilege Vulnerability

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83868: Microsoft Bluetooth Driver Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85867: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

PT-2026-111477

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description Privilege escalation exists within the DOM: Navigation component. Recommendations Update Firefo...

Mozilla Thunderbird < 158.0

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 158.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-109 advisory. - Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1...

Ubuntu 20.04 LTS : Linux kernel (Oracle) vulnerabilities (USN-8879-1)

"The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8879-1 advisory. It was discovered that the i.MX clock driver in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null...

Microsoft SQL Server: CVE-2026-88085: Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

PT-2026-112657

Name of the Vulnerable Software and Affected Versions Windows Direct Composition affected versions not specified Description A heap-based buffer overflow exists in Windows Direct Composition. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occu...

Microsoft Windows: CVE-2026-83839: Windows Hyper-V Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2026-100225: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83871: Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability

Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...

PT-2026-112014

Name of the Vulnerable Software and Affected Versions Windows Backup Engine affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the...

Mozilla Thunderbird < 153.5

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 153.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-110 advisory. - Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and...

Mozilla Thunderbird < 153.5

The version of Thunderbird installed on the remote Windows host is prior to 153.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-110 advisory. - Privilege escalation in the WebExtensions component. This vulnerability was fixed in Firefox 158 and Firefox ESR...

PT-2026-111425

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description Privilege escalation exists within the Application Update component. Recommendations Update...