PT-2026-112111

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A use after free issue in Windows Storage allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application...

PT-2026-111995

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Incorrect authorization allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version th...

PT-2026-111976

Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description Incorrect default permissions in the service allow an authorized attacker to elevate privileges locally, which enables them to affect the system. Recommendations At the...

Microsoft Windows: CVE-2026-88168: Windows Bind Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

PT-2026-111338

Incorrect Authorization CWE-863 in Elasticsearch can lead to Privilege Escalation via a delegated administrative privilege whose scope is not fully enforced during authorization checks. Elasticsearch contains an incorrect authorization weakness in a configurable, non-default privilege that lets a...

Microsoft Windows: CVE-2026-96118: Windows Graphics Kernel Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96915: Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

PT-2026-112859

Name of the Vulnerable Software and Affected Versions Windows Universal Plug and Play UPnP Device Host affected versions not specified Description A heap-based buffer overflow occurs in the Windows Universal Plug and Play UPnP Device Host. This issue allows an authorized attacker to elevate...

Microsoft Windows: CVE-2026-83901: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

PT-2026-112236

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A numeric truncation error in the Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. Numeric truncation occurs when a value is too...

Microsoft Windows: CVE-2026-88074: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

PT-2026-112443

Name of the Vulnerable Software and Affected Versions Windows Core Messaging affected versions not specified Description An untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendation...

PT-2026-113452

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An integer overflow or wraparound occurs, allowing an authorized attacker to elevate privileges locally and affect the system. An integer overflow is a condition where an arithmetic...

Microsoft Windows: CVE-2026-83749: Windows Overlay Filter Elevation of Privilege Vulnerability

Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88180: Windows DWM Core Library Elevation of Privilege Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69736: Windows Credential Manager Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Manager allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70270: Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Container Isolation FS Filter Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83698: Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83876: Windows Shell Elevation of Privilege Vulnerability

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

PT-2026-112450

Name of the Vulnerable Software and Affected Versions Windows Sensor Data Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Sensor Data Service. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based...