PT-2026-112080

Name of the Vulnerable Software and Affected Versions Windows Update affected versions not specified Description External control of a file name or path allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no information about a newer...

ROS-20261013-73-0325

The vulnerability in the kernel-lt is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Microsoft Windows: CVE-2026-83789: Windows SMB Client Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network...

Microsoft Windows: CVE-2026-85858: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

PT-2026-112327

Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A use-after-free issue exists in the Windows Ancillary Function Driver for WinSock. This allows an authorized attacker to elevate privileges locally on t...

PT-2026-112764

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A numeric truncation error occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally and affect the system. Recommendations At the moment, there...

PT-2026-112253

Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description A use after free issue in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw tha...

PT-2026-112649

Name of the Vulnerable Software and Affected Versions Windows Update Orchestrator Service affected versions not specified Description A use after free issue exists in the Windows Update Orchestrator Service. This flaw allows an authorized attacker to elevate privileges locally. Use after free is ...

PT-2026-112736

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description The Windows Common Log File System Driver contains a flaw where functionality from an untrusted control sphere is included, allowing an authorized attacker to...

PT-2026-112738

Name of the Vulnerable Software and Affected Versions Windows Phone Service affected versions not specified Description A race condition exists in the Windows Phone Service, where concurrent execution using a shared resource occurs without proper synchronization. This flaw allows an authorized...

CVE-2026-37107

An issue in HTMLy v.3.1.1 allows a remote attacker to escalate privileges via the getfeed function in the admin.php component...

Microsoft Windows: CVE-2026-70237: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83775: Windows Installer Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2026-112569

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A race condition occurs when concurrent execution using a shared resource lacks proper synchronization. This allows an authorized attacker to elevate privileges locally on the syste...

Microsoft Windows: CVE-2026-96950: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85933: Windows Print Spooler Components Elevation of Privilege Vulnerability

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

PT-2026-112016

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description A time-of-check time-of-use toctou race condition exists in Windows Modern Device Management MDM. A TOCTOU race condition occurs when a program checks the state o...

PT-2026-112014

Name of the Vulnerable Software and Affected Versions Windows Backup Engine affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the...

PT-2026-112015

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A use-after-free condition in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

PT-2026-112074

Name of the Vulnerable Software and Affected Versions Windows Update affected versions not specified Description An untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally, which can lead to a full system compromise. Recommendations At the moment, there...