CVE-2026-96188: External Control of System or Configuration Setting

External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally...

CVE-2026-83741: Use After Free

Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally...

CVE-2026-96304: Use After Free

Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-87691: Use After Free

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally...

PT-2026-112854

Name of the Vulnerable Software and Affected Versions Windows Universal Plug and Play UPnP Device Host affected versions not specified Description A use-after-free condition in the Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

UBUNTU-CVE-2026-107612

Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and its desktop server process. The named shared memory segment in the Global...

CVE-2026-69856: Use After Free

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-96223: Use After Free

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2026-96862: Out-of-bounds Read

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-83912: Use After Free

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...

CVE-2026-96216: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-96118: Out-of-bounds Read

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-83768: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-109453: Heap-based Buffer Overflow

Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70271: Use After Free

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

CVE-2026-110112: Incorrect Authorization

Dockhand before 1.0.50 contains a privilege escalation vulnerability that allows users from another tenant to gain admin access because OIDC iss, aud, nonce and exp claims are not validated. Attackers with admin rights in another tenant of a shared provider like Microsoft Entra ID can recreate th...

Microsoft Windows: CVE-2026-70021: Windows Direct Composition Elevation of Privilege Vulnerability

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...

PT-2026-113135

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-113134

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-112739

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A heap-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issu...