CVE-2026-85810: Use After Free

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...

CVE-2026-83727: Buffer Over-read

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-85824: Use After Free

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally...

CVE-2026-83678: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

VulnCheck KEV: CVE-2026-28165

Unauthenticated Privilege Escalation in Digits = 9.2 versions...

VulnCheck KEV: CVE-2026-4003

The Users manager – PN plugin for WordPress is vulnerable to Privilege Escalation via Arbitrary User Meta Update in all versions up to and including 1.1.15. This is due to a flawed authorization logic check in the userspnajaxnoprivserver function within the 'userspnformsave' case. The conditional...

VulnCheck KEV: CVE-2026-3629

The Import and export users and customers plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.29.7. This is due to the 'saveextrauserprofilefields' function not properly restricting which user meta keys can be updated via profile fields. The...

VulnCheck KEV: CVE-2023-6009

The UserPro plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.1.4 due to insufficient restriction on the 'userproupdateuserprofile' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify...

VulnCheck KEV: CVE-2026-75927

The PublishPress Capabilities – User Role Editor, Access Permissions, User Capabilities, Admin Menus plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.50.0. This is due to the addPluginCapabilities function unconditionally granting the Editor role...

CVE-2026-105004: Out-of-bounds Read

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

PT-2026-113138

Name of the Vulnerable Software and Affected Versions Windows Embedded Mode Service affected versions not specified Description A race condition occurs in the Windows Embedded Mode Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate...

CVE-2026-83588: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-88180: Out-of-bounds Read

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-83691: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

CVE-2026-96310: Use After Free

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-83707: Use After Free

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

PT-2026-112631

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A use after free issue in Windows Win32K allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continu...

PT-2026-112632

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A heap-based buffer overflow exists in Windows Push Notifications. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occu...

PT-2026-112633

Name of the Vulnerable Software and Affected Versions Microsoft Bluetooth Driver affected versions not specified Description A race condition exists in the Microsoft Bluetooth Driver. This occurs when concurrent execution using a shared resource lacks proper synchronization, allowing an authorize...

PT-2026-112637

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description An incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information abou...