CVE-2026-84019: Use After Free

Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally...

PT-2026-112530

Name of the Vulnerable Software and Affected Versions Windows Overlay Filter affected versions not specified Description A buffer over-read in the Windows Overlay Filter allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the...

PT-2026-112594

Name of the Vulnerable Software and Affected Versions Windows Bluetooth Port Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Bluetooth Port Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A...

PT-2026-113063

Name of the Vulnerable Software and Affected Versions Windows USB Print Driver affected versions not specified Description A use-after-free condition exists in the Windows USB Print Driver. This allows an authorized attacker to elevate privileges locally on the system. Use-after-free is a memory...

PT-2026-112999

Name of the Vulnerable Software and Affected Versions Microsoft Scripting Engine affected versions not specified Description A heap-based buffer overflow occurs in the Microsoft Scripting Engine, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a...

Microsoft Windows: CVE-2026-83792: Windows Device Install Service Elevation of Privilege Vulnerability

Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83873: Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85904: Windows Device Association Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70138: Windows OLE Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally...

PT-2026-112183

Name of the Vulnerable Software and Affected Versions Windows NetBIOS affected versions not specified Description A heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

CVE-2026-83848: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70210: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-97803: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-96844: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network...

VulnCheck KEV: CVE-2026-4003

The Users manager – PN plugin for WordPress is vulnerable to Privilege Escalation via Arbitrary User Meta Update in all versions up to and including 1.1.15. This is due to a flawed authorization logic check in the userspnajaxnoprivserver function within the 'userspnformsave' case. The conditional...

Microsoft Windows: CVE-2026-96844: Microsoft Bluetooth Driver Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network...

Microsoft Windows: CVE-2026-69916: Windows NTFS Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-112852

Name of the Vulnerable Software and Affected Versions Windows PCI Bus Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows PCI Bus Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer...

CVE-2026-83828: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-85873: Authorization Bypass Through User-Controlled Key

Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network...