Microsoft SharePoint: CVE-2026-70266: Microsoft Office SharePoint Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

Microsoft SharePoint: CVE-2026-88200: Microsoft Office SharePoint Elevation of Privilege Vulnerability

Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

Microsoft SharePoint: CVE-2026-70246: Microsoft Office SharePoint Elevation of Privilege Vulnerability

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

Microsoft Office: CVE-2026-96997: Microsoft Office OneNote Elevation of Privilege Vulnerability

Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...

Microsoft Office: CVE-2026-96995: Microsoft Office Word Elevation of Privilege Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally...

Microsoft SharePoint: CVE-2026-88206: Microsoft Office SharePoint Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

Microsoft Office: CVE-2026-70276: Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

PT-2026-112769

Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description A use after free issue in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw tha...

CVE-2026-96937: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-88182: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-88194: Out-of-bounds Read

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-85338: Out-of-bounds Read

Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85904: Windows Device Association Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85920: Windows BitLocker Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85915: Windows PCI Bus Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85914: Windows Embedded Mode Service Elevation of Privilege Vulnerability

Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88098: Windows Security Support Provider Interface Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87713: Windows Bluetooth Port Driver Remote Code Execution

Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network...

Microsoft Windows: CVE-2026-87711: Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87710: Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Improper access control in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...