CVE-2026-70103: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69387: Use After Free

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-112901

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A double free issue in Windows Hyper-V allows an authorized attacker to elevate privileges locally. A double free occurs when the system attempts to free the same memory location twic...

CVE-2026-83883: Use After Free

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-97811: Microsoft OpenSSH for Windows Elevation of Privilege Vulnerability

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...

PT-2026-112954

Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Controller affected versions not specified Description A heap-based buffer overflow occurs in the Windows Storage Spaces Controller. This issue allows an authorized attacker to elevate privileges locally on the system. A...

PT-2026-112604

Name of the Vulnerable Software and Affected Versions Windows Bluetooth A2DP driver affected versions not specified Description An integer underflow wrap or wraparound occurs in the Bluetooth A2DP driver. This allows an authorized attacker to elevate privileges over an adjacent network, potential...

PT-2026-112539

Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A use-after-free condition in Windows Hello allows an authorized attacker to elevate privileges locally. A use-after-free is a memory corruption issue that occurs when an application...

PT-2026-112598

Name of the Vulnerable Software and Affected Versions Windows Spaceport.sys affected versions not specified Description An out-of-bounds read in the Spaceport.sys driver allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the...

PT-2026-112544

Name of the Vulnerable Software and Affected Versions Windows Overlay Filter affected versions not specified Description A use-after-free condition in the Windows Overlay Filter allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs wh...

PT-2026-112529

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A use-after-free condition in the Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occur...

PT-2026-112491

Name of the Vulnerable Software and Affected Versions Windows Connected User Experiences and Telemetry affected versions not specified Description A use-after-free condition exists in Windows Connected User Experiences and Telemetry. This allows an authorized attacker to elevate privileges locall...

PT-2026-112503

Name of the Vulnerable Software and Affected Versions Windows Client-Side Caching CSC Service affected versions not specified Description A stack-based buffer overflow in the Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally. A stack-based buffer...

PT-2026-112903

Name of the Vulnerable Software and Affected Versions Windows Graphics Kernel affected versions not specified Description A use-after-free condition exists in the Windows Graphics Kernel. This allows an authorized attacker to elevate privileges locally on the system. Use-after-free is a memory...

PT-2026-111352

Ghost is a Node.js content management system. From 4.39.0 until 6.64.0, staff users with permission to view staff invites were able to discover the secret token of pending invites, including invites for roles with higher privileges than their own. This could allow a staff user to escalate their...

PT-2026-112498

Name of the Vulnerable Software and Affected Versions Windows Volume Manager Extension Driver affected versions not specified Description An out-of-bounds read in the Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally, which can lead to full system...

PT-2026-112916

Name of the Vulnerable Software and Affected Versions Windows Storage Spaces Controller affected versions not specified Description A use-after-free condition occurs in the Windows Storage Spaces Controller, which allows an authorized attacker to elevate privileges locally. Use-after-free is a...

PT-2026-112921

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A use-after-free condition in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

PT-2026-112391

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Security Center allows an authorized attacker to elevate privileges locally...

PT-2026-112614

Name of the Vulnerable Software and Affected Versions Windows COM+ Event System Service affected versions not specified Description An untrusted pointer dereference in the Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. Recommendations At the moment,...