CVE-2026-85363

Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to elevate privileges over a network...

PT-2026-111136

Name of the Vulnerable Software and Affected Versions SAP Manufacturing Integration and Intelligence versions 15.4 through 15.5 Description SAP Manufacturing Integration and Intelligence does not sufficiently enforce authorization boundaries within the Configuration Service. An attacker with MII...

PT-2026-112616

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A heap-based buffer overflow occurs in the Microsoft Windows Search Component. This issue allows an authorized attacker to elevate privileges locally on the system....

PT-2026-112014

Name of the Vulnerable Software and Affected Versions Windows Backup Engine affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the...

CVE-2026-100217: Missing Authorization

Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69945: Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally...

CVE-2026-83694: Out-of-bounds Read

Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83692: Windows Bind Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-85943: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Reliable Multicast Transport Driver RMCAST allows an authorized attacker to elevate privileges locally...

CVE-2026-83583: Missing Authorization

Improper access control in Windows Geotag Broker allows an authorized attacker to elevate privileges locally...

CVE-2026-70021: Use After Free

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...

CVE-2026-83707: Use After Free

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70212: Windows Security Center Elevation of Privilege Vulnerability

Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally...

CVE-2026-83753: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally...

PT-2026-112822

Name of the Vulnerable Software and Affected Versions Windows Clipboard User Service affected versions not specified Description A use-after-free condition in the Windows Clipboard User Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issu...

PT-2026-111134

Name of the Vulnerable Software and Affected Versions SAP UI5 affected versions not specified Description Insufficient input validation under certain configurations allows a low-privileged attacker to submit specially crafted content. This content is subsequently rendered in a victim's browser,...

CVE-2026-104661: Incorrect Privilege Assignment

GitLab has remediated an issue in GitLab EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user holding a custom role with compliance framework administration permissions to configure a...

Microsoft Windows: CVE-2026-83767: Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2026-112158

Name of the Vulnerable Software and Affected Versions Windows IP Over USB Service affected versions not specified Description An integer overflow or wraparound occurs in the Windows IP Over USB Service. This issue allows an authorized attacker to elevate privileges locally, enabling them to affec...

PT-2026-112099

Name of the Vulnerable Software and Affected Versions Microsoft COM for Windows affected versions not specified Description A heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program...