CVE-2026-85925: Improper Restriction of Communication Channel to Intended Endpoints

Improper restriction of communication channel to intended endpoints in Azure Key Vault allows an authorized attacker to elevate privileges over a network...

CVE-2026-69963: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70566: NULL Pointer Dereference

Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally...

CVE-2026-85918: Use After Free

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85918: Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

CVE-2026-37107

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the getfeed function in the admin.php component...

PT-2026-112579

Name of the Vulnerable Software and Affected Versions Windows COM+ Event System Service affected versions not specified Description A use-after-free condition in the Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruptio...

PT-2026-112562

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory...

PT-2026-112571

Name of the Vulnerable Software and Affected Versions Windows Bluetooth Service affected versions not specified Description A heap-based buffer overflow in the Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network. A heap-based buffer overflow...

PT-2026-112611

Name of the Vulnerable Software and Affected Versions Windows Internet wininet.dll affected versions not specified Description Improper privilege management in the Windows Internet component allows an authorized attacker to perform local spoofing, which can be used to affect the system...

PT-2026-112597

Name of the Vulnerable Software and Affected Versions Windows COM+ Event System Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows COM+ Event System Service. This issue allows an authorized attacker to elevate privileges locally on the system. A...

PT-2026-112577

Name of the Vulnerable Software and Affected Versions Windows Management Instrumentation affected versions not specified Description A heap-based buffer overflow occurs in Windows Management Instrumentation, which allows an authorized attacker to elevate privileges locally. A heap-based buffer...

PT-2026-112558

Name of the Vulnerable Software and Affected Versions Windows Input System affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to elevate privileges locally on the system...

PT-2026-112596

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A heap-based buffer overflow occurs in the Microsoft Windows Search Component. This issue allows an authorized attacker to elevate privileges locally on the system....

PT-2026-112575

Name of the Vulnerable Software and Affected Versions Windows Program Compatibility Assistant Service affected versions not specified Description Improper null termination in the Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally. Null...

PT-2026-112547

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use-after-free condition exists in Windows Installer, which allows an authorized attacker to elevate privileges locally. A use-after-free is a memory corruption issue that occurs...

PT-2026-112520

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use-after-free condition exists in Windows Installer, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs wh...

PT-2026-112449

Name of the Vulnerable Software and Affected Versions Windows USB Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows USB Driver, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruptio...

PT-2026-112441

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description The use of an externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information abou...

PT-2026-112502

Name of the Vulnerable Software and Affected Versions Windows Client-Side Caching CSC Service affected versions not specified Description A heap-based buffer overflow in the Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally. A heap-based buffer...