Microsoft Windows: CVE-2026-96915: Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

PT-2026-112859

Name of the Vulnerable Software and Affected Versions Windows Universal Plug and Play UPnP Device Host affected versions not specified Description A heap-based buffer overflow occurs in the Windows Universal Plug and Play UPnP Device Host. This issue allows an authorized attacker to elevate...

CVE-2026-96249: Use After Free

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83901: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

CVE-2026-85927: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

PT-2026-112236

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A numeric truncation error in the Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. Numeric truncation occurs when a value is too...

CVE-2026-70123: Numeric Truncation Error

Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88074: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83796: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

KLA91342 Multiple vulnerabilities in Microsoft Skype

Multiple vulnerabilities were found in Microsoft Skype. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...

KLA91343 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, perform cross-site scripting attack, spoof user interface. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in...

KLA91334 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microso...

KLA91336 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...

PT-2026-112443

Name of the Vulnerable Software and Affected Versions Windows Core Messaging affected versions not specified Description An untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendation...

KLA91347 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...

PT-2026-111961

Name of the Vulnerable Software and Affected Versions Windows Credential Providers affected versions not specified Description An issue exists where concurrent execution using a shared resource with improper synchronization, known as a race condition, allows an authorized attacker to elevate...

CVE-2026-37107

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component. The vulnerability is associated with CWE-269 (Improper Privilege Management) and carries a CRITICAL CVSS 3.1 base score of 9.8. Specific exploit details or remediation i...

KLA91344 Multiple vulnerabilities in Microsoft SQL Server

Multiple vulnerabilities were found in Microsoft SQL Server. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote...

KLA91339 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerabilit...

KLA91338 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user...