CVE-2026-105720: Incorrect Authorization

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-72968: Use After Free

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69363: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges over a network...

CVE-2026-70566: NULL Pointer Dereference

Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally...

CVE-2026-61931: Use After Free

Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69763: Use After Free

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-69766: Use After Free

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-69935: Use After Free

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-69795: NULL Pointer Dereference

Null pointer dereference in Windows Clipboard Server allows an authorized attacker to elevate privileges locally...

CVE-2026-69867: Out-of-bounds Read

Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally...

CVE-2026-69840: Use After Free

Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally...

CVE-2026-69850: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally...

PT-2026-112881

Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-96929: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-113020

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description An authorized attacker can elevate privileges over a network within Microsoft Office SharePoint. Recommendations At the moment, there is no information about a newer versi...

Microsoft Windows: CVE-2026-96938: Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to elevate privileges locally...

PT-2026-111976

Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description Incorrect default permissions in the service allow an authorized attacker to elevate privileges locally, which enables them to affect the system. Recommendations At the...

Microsoft Windows: CVE-2026-88168: Windows Bind Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

PT-2026-111338

Incorrect Authorization CWE-863 in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is not fully enforced during authorization checks. Elasticsearch contains an incorrect authorization weakness in a configurable, non-default privilege that lets a...

Microsoft Windows: CVE-2026-88071: Windows Hyper-V Elevation of Privilege Vulnerability

Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...