PT-2026-112414

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A use-after-free condition in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges...

PT-2026-112642

Name of the Vulnerable Software and Affected Versions HID Parser Library affected versions not specified Description An integer overflow or wraparound in the HID Parser Library allows an authorized attacker to elevate privileges locally. An integer overflow occurs when an arithmetic operation...

PT-2026-112429

Name of the Vulnerable Software and Affected Versions Microsoft HID Parser Library affected versions not specified Description A heap-based buffer overflow exists in the HID Parser Library. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs...

PT-2026-112357

Name of the Vulnerable Software and Affected Versions Windows Container Isolation FS Filter Driver affected versions not specified Description An untrusted pointer dereference in the Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally...

PT-2026-112276

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, the...

PT-2026-112258

Name of the Vulnerable Software and Affected Versions Windows Direct Composition affected versions not specified Description A use after free issue in Windows Direct Composition allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs whe...

PT-2026-112243

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free issue in Windows Event Tracing allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continu...

PT-2026-112240

Name of the Vulnerable Software and Affected Versions Microsoft Windows Media Foundation affected versions not specified Description A heap-based buffer overflow exists in Microsoft Windows Media Foundation. This issue allows an unauthorized attacker to elevate privileges locally on the system. A...

CVE-2026-83763: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Input System allows an authorized attacker to elevate privileges locally...

CVE-2026-85829: Double Free

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally...

CVE-2026-102216: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

PT-2026-112504

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free issue in the Now Playing Session Manager allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an applicati...

PT-2026-111161

Name of the Vulnerable Software and Affected Versions GitLab EE versions 17.0 through 19.2.7 GitLab EE versions 19.3 through 19.3.4 GitLab EE versions 19.4 through 19.4.1 Description An improper privilege assignment allows an authenticated user with a custom role and compliance framework...

CVE-2026-70132: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally...

PT-2026-112912

Name of the Vulnerable Software and Affected Versions Azure Storage Library affected versions not specified Description Improper neutralization of special elements in output used by a downstream component injection allows an authorized attacker to elevate privileges over a network. Recommendation...

PT-2026-111136

Name of the Vulnerable Software and Affected Versions SAP Manufacturing Integration and Intelligence versions 15.4 through 15.5 Description SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within the Configuration Service. An attacker with MII...

Microsoft Windows: CVE-2026-69949: Windows Client for NFS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally...

PT-2026-112158

Name of the Vulnerable Software and Affected Versions Windows IP Over USB Service affected versions not specified Description An integer overflow or wraparound occurs in the Windows IP Over USB Service. This issue allows an authorized attacker to elevate privileges locally, enabling them to affec...

PT-2026-112117

Name of the Vulnerable Software and Affected Versions Windows Client for NFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Client for NFS. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer...

PT-2026-112103

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An integer overflow or wraparound occurs in the Windows NTFS file system, which allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment,...