Microsoft Windows: CVE-2026-70222: Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96916: Windows NTFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-111879

Name of the Vulnerable Software and Affected Versions Windows Update Service affected versions not specified Description A use-after-free condition in the Windows Update Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs wh...

Microsoft Windows: CVE-2026-83639: Windows Sensor Data Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally...

CVE-2026-110112: Incorrect Authorization

Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of a shared provider like Microsoft Entra ID can recreate th...

CVE-2026-34633: Server-Side Request Forgery (SSRF)

ColdFusion is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. A low-privileged attacker could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not require user interaction. Scope is...

CVE-2026-0893: Exposure of Sensitive Information Due to Incompatible Policies

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and further impact on Confidentiality,...

CVE-2026-59241: Incorrect Privilege Assignment

A vulnerability has been identified in SIMATIC WinCC V7.5 All versions, SIMATIC WinCC V8.0 All versions V8.0 Update 11, SIMATIC WinCC V8.1 All versions V8.1 Update 7. The affected application does not sufficiently restrict the permissions assigned to a database role. This could allow an...

CVE-2026-109143: Improper Privilege Management

A vulnerability was determined in calcom cal.com and cal.diy up to 6.2.0. This vulnerability affects the function credentials.delete of the file /api/trpc/credentials/delete of the component Credentials Handler. This manipulation of the argument teamId causes improper privilege management. The...

CVE-2026-109520: Privilege Defined With Unsafe Actions

A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of the component Dispatch Handler. This manipulation of the argument SystemBuffer causes privilege defined with unsafe actions. The attack...

CVE-2026-106622: Server-Side Request Forgery (SSRF)

ColdFusion is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed...

CVE-2026-105897: Server-Side Request Forgery (SSRF)

ColdFusion is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed...

CVE-2026-37107: Improper Privilege Management

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the getfeed function in the admin.php component...

Microsoft Windows: CVE-2026-88189: Windows DWM Core Library Elevation of Privilege Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

PT-2026-112739

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A heap-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issu...

PT-2026-111997

Name of the Vulnerable Software and Affected Versions Windows Distributed File System DFS affected versions not specified Description An untrusted pointer dereference in Windows Distributed File System DFS allows an unauthorized attacker to elevate privileges over a network. Recommendations At th...

Microsoft Windows: CVE-2026-88160: Microsoft Windows Search Component Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

PT-2026-111974

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...

Microsoft Windows: CVE-2026-96307: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2026-112759

Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Encrypting File System EFS, which is a feature that provides file-level encryption. This flaw allows an authorize...