Microsoft Windows: CVE-2026-85375: Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability

Use after free in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

PT-2026-112954

Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Controller affected versions not specified Description A heap-based buffer overflow occurs in the Windows Storage Spaces Controller. This issue allows an authorized attacker to elevate privileges locally on the system. A...

PT-2026-112475

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description The use of an uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no...

PT-2026-112604

Name of the Vulnerable Software and Affected Versions Windows Bluetooth A2DP driver affected versions not specified Description An integer underflow wrap or wraparound occurs in the Bluetooth A2DP driver. This allows an authorized attacker to elevate privileges over an adjacent network, potential...

PT-2026-112539

Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A use-after-free condition in Windows Hello allows an authorized attacker to elevate privileges locally. A use-after-free is a memory corruption issue that occurs when an application...

PT-2026-112598

Name of the Vulnerable Software and Affected Versions Windows Spaceport.sys affected versions not specified Description An out-of-bounds read in the Spaceport.sys driver allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the...

PT-2026-112544

Name of the Vulnerable Software and Affected Versions Windows Overlay Filter affected versions not specified Description A use-after-free condition in the Windows Overlay Filter allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs wh...

PT-2026-112529

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A use-after-free condition in the Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occur...

PT-2026-112491

Name of the Vulnerable Software and Affected Versions Windows Connected User Experiences and Telemetry affected versions not specified Description A use-after-free condition exists in Windows Connected User Experiences and Telemetry. This allows an authorized attacker to elevate privileges locall...

PT-2026-112503

Name of the Vulnerable Software and Affected Versions Windows Client-Side Caching CSC Service affected versions not specified Description A stack-based buffer overflow in the Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally. A stack-based buffer...

PT-2026-112903

Name of the Vulnerable Software and Affected Versions Windows Graphics Kernel affected versions not specified Description A use-after-free condition exists in the Windows Graphics Kernel. This allows an authorized attacker to elevate privileges locally on the system. Use-after-free is a memory...

PT-2026-111352

Ghost is a Node.js content management system. From 4.39.0 until 6.64.0, staff users with permission to view staff invites were able to discover the secret token of pending invites, including invites for roles with higher privileges than their own. This could allow a staff user to escalate their...

PT-2026-112498

Name of the Vulnerable Software and Affected Versions Windows Volume Manager Extension Driver affected versions not specified Description An out-of-bounds read in the Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally, which can lead to full system...

PT-2026-112916

Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Controller affected versions not specified Description A use-after-free condition occurs in the Windows Storage Spaces Controller, which allows an authorized attacker to elevate privileges locally. Use-after-free is a...

PT-2026-112921

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A use-after-free condition in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

PT-2026-112391

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Security Center allows an authorized attacker to elevate privileges locally...

PT-2026-112614

Name of the Vulnerable Software and Affected Versions Windows COM+ Event System Service affected versions not specified Description An untrusted pointer dereference in the Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...

PT-2026-112749

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description An out-of-bounds read occurs in Windows Hyper-V, which allows an authorized attacker to elevate privileges locally and affect the system. An out-of-bounds read is a condition where a...

PT-2026-113148

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A use-after-free condition in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges...

PT-2026-113233

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow in the HID class driver allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap...