PT-2026-112016

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description A time-of-check time-of-use toctou race condition exists in Windows Modern Device Management MDM. A TOCTOU race condition occurs when a program checks the state o...

PT-2026-112014

Name of the Vulnerable Software and Affected Versions Windows Backup Engine affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the...

PT-2026-112015

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A use-after-free condition in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

PT-2026-112074

Name of the Vulnerable Software and Affected Versions Windows Update affected versions not specified Description An untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally, which can lead to a full system compromise. Recommendations At the moment, there...

CVE-2026-96933: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

PT-2026-112611

Name of the Vulnerable Software and Affected Versions Windows Internet wininet.dll affected versions not specified Description Improper privilege management in the Windows Internet component allows an authorized attacker to perform local spoofing, which can be used to affect the system...

CVE-2026-83746: Absolute Path Traversal

Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network...

PT-2026-112805

Name of the Vulnerable Software and Affected Versions Windows Image Acquisition affected versions not specified Description The use of an externally-controlled format string allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no...

PT-2026-112056

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an authorized attacker ...

CVE-2026-69387: Use After Free

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69387: Windows Error Reporting Elevation of Privilege Vulnerability

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69673: Windows Update Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69471: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69471: Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-69673: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69354: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69354: Windows Error Reporting Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69718: Windows Update Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-69718: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Windows Update allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69733: Windows Update Elevation of Privilege Vulnerability

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...