PT-2026-112755

Name of the Vulnerable Software and Affected Versions Windows Universal Plug and Play UPnP Device Host affected versions not specified Description A use-after-free condition in the Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

PT-2026-112763

Name of the Vulnerable Software and Affected Versions Windows Text Services Framework affected versions not specified Description A use-after-free condition exists in the Windows Text Services Framework. This allows an authorized attacker to elevate privileges locally on the system. Use-after-fre...

PT-2026-111892

Name of the Vulnerable Software and Affected Versions Windows Group Policy affected versions not specified Description Improper privilege management allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is no...

PT-2026-111860

Name of the Vulnerable Software and Affected Versions Vifm versions 0.8.1-beta through 0.14.4 Description The software reuses a pre-existing Inter-Process Communication IPC FIFO in the shared temporary directory without verifying ownership. This allows a local attacker to pre-create a...

PT-2026-112757

Name of the Vulnerable Software and Affected Versions Windows CD-ROM Driver affected versions not specified Description A type confusion issue occurs in the Windows CD-ROM Driver when a resource is accessed using an incompatible type. This allows an authorized attacker to elevate privileges local...

PT-2026-112805

Name of the Vulnerable Software and Affected Versions Windows Image Acquisition affected versions not specified Description The use of an externally-controlled format string allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no...

PT-2026-112756

Name of the Vulnerable Software and Affected Versions Windows Print Spooler affected versions not specified Description Weak authentication in Windows Print Spooler components allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At...

PT-2026-112940

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A use-after-free condition in the Windows SMB Server allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...

PT-2026-112909

Name of the Vulnerable Software and Affected Versions Windows Management Instrumentation affected versions not specified Description Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally. Deserialization is the process ...

PT-2026-111919

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A heap-based buffer overflow in the Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a...

PT-2026-111908

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A use-after-free condition in the Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

PT-2026-111907

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A use-after-free condition in the Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

PT-2026-112034

Name of the Vulnerable Software and Affected Versions Dockhand versions prior to 1.0.50 Description An issue exists where OpenID Connect OIDC claims, specifically iss, aud, nonce, and exp, are not validated. This allows a user from a different tenant of a shared provider, such as Microsoft Entra...

PT-2026-111897

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

PT-2026-112768

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A heap-based buffer overflow occurs in Windows Error Reporting, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

PT-2026-112854

Name of the Vulnerable Software and Affected Versions Windows Universal Plug and Play UPnP Device Host affected versions not specified Description A use-after-free condition in the Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

PT-2026-112843

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A race condition occurs in the Windows Device Association Service due to improper synchronization when using a shared resource. This allows an authorized attacker t...

PT-2026-112111

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A use after free issue in Windows Storage allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application...

PT-2026-112104

Name of the Vulnerable Software and Affected Versions Windows Core Messaging affected versions not specified Description A heap-based buffer overflow exists in Windows Core Messaging. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when ...

PT-2026-112436

Name of the Vulnerable Software and Affected Versions Windows Smart Card affected versions not specified Description A heap-based buffer overflow occurs in Windows Smart Card, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption...