CVE-2026-96223: Use After Free

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2026-96862: Out-of-bounds Read

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-83912: Use After Free

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...

CVE-2026-96216: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-96118: Out-of-bounds Read

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-83768: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-109453: Heap-based Buffer Overflow

Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70271: Use After Free

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

CVE-2026-110112: Incorrect Authorization

Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of a shared provider like Microsoft Entra ID can recreate th...

Microsoft Windows: CVE-2026-70021: Windows Direct Composition Elevation of Privilege Vulnerability

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...

PT-2026-113135

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-113134

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-112739

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A heap-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issu...

PT-2026-113144

Time-of-check time-of-use toctou race condition in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...

PT-2026-113239

Name of the Vulnerable Software and Affected Versions Windows Container Isolation FS Filter Driver unionfs.sys affected versions not specified Description A heap-based buffer overflow occurs in the Windows Container Isolation FS Filter Driver unionfs.sys. This issue allows an authorized attacker ...

PT-2026-112399

Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

PT-2026-112742

Name of the Vulnerable Software and Affected Versions Windows Management Instrumentation affected versions not specified Description An authorized attacker can elevate privileges locally due to the release of an invalid pointer or reference within the Windows Management Instrumentation component...

CVE-2026-85925: Improper Restriction of Communication Channel to Intended Endpoints

Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network...

CVE-2026-85920: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally...