CVE-2026-88074: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96915: Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

PT-2026-112859

Name of the Vulnerable Software and Affected Versions Windows Universal Plug and Play UPnP Device Host affected versions not specified Description A heap-based buffer overflow occurs in the Windows Universal Plug and Play UPnP Device Host. This issue allows an authorized attacker to elevate...

CVE-2026-96249: Use After Free

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83901: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

CVE-2026-85927: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges locally...

PT-2026-112236

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A numeric truncation error in the Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. Numeric truncation occurs when a value is too...

CVE-2026-70123: Numeric Truncation Error

Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88074: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83796: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-112443

Name of the Vulnerable Software and Affected Versions Windows Core Messaging affected versions not specified Description An untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendation...

PT-2026-111961

Name of the Vulnerable Software and Affected Versions Windows Credential Providers affected versions not specified Description An issue exists where concurrent execution using a shared resource with improper synchronization, known as a race condition, allows an authorized attacker to elevate...

CVE-2026-37107

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the get_feed function in the admin.php component. The vulnerability is associated with CWE-269 (Improper Privilege Management) and carries a CRITICAL CVSS 3.1 base score of 9.8. Specific exploit details or remediation i...

CVE-2026-85854: Use After Free

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

PT-2026-113452

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An integer overflow or wraparound occurs, allowing an authorized attacker to elevate privileges locally and affect the system. An integer overflow is a condition where an arithmetic...

Microsoft Windows: CVE-2026-83749: Windows Overlay Filter Elevation of Privilege Vulnerability

Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88180: Windows DWM Core Library Elevation of Privilege Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70086: Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69736: Windows Credential Manager Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Manager allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70270: Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally...