CVE-2026-62696

CVE-2026-62696 impacts the Windows Program Compatibility Assistant Service. The advisory describes an integer underflow (wrap/wraparound) that allows an authorized local attacker to elevate privileges. CVSS: 3.1, Base score 7.8 (HIGH), with Local attack vector, Low attack complexity, Privileges r...

EUVD-2026-56346

Integer underflow wrap or wraparound in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62696 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

...

Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62696: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

PT-2026-70462

Name of the Vulnerable Software and Affected Versions Windows Program Compatibility Assistant Service affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows Program Compatibility Assistant Service. This issue allows an authorized attacker to...

Program Compatibility Assistant Service Privilege Escalation

The vulnerability of the Program Compatibility Assistant service for Windows systems is related to synchronization errors when using a common resource “Race Condition”. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-45487

Time-of-check time-of-use TOCTOU race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-35673

Time-of-check time-of-use TOCTOU race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-45487

Time-of-check time-of-use TOCTOU race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-45487

CVE-2026-45487 is a Windows vulnerability in the Program Compatibility Assistant Service where a TOCTOU race condition enables a local, authorized user to elevate privileges. Affected component: Program Compatibility Assistant Service on Windows. Root cause: TOCTOU race condition allowing privile...

CVE-2026-45487 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

...

CVE-2026-45487 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

...

PT-2026-47969

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A Time-of-check time-of-use TOCTOU race condition exists in the Program Compatibility Assistant Service. This flaw allows an authorized attacker to elevate privileges locally, enabling them t...

CVE-2026-45487: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use TOCTOU race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

EUVD-2025-13381

Malicious code in bioql PyPI...

AZL-69929 CVE-2024-58100 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: bpf: check changespktdata property for extension programs When processing calls to global sub-programs, verifier decides whether to invalidate all packet pointers in current state depending on the changespktdata property of the...

CVE-2024-58100

In the Linux kernel, the following vulnerability has been resolved: bpf: check changespktdata property for extension programs When processing calls to global sub-programs, verifier decides whether to invalidate all packet pointers in current state depending on the changespktdata property of the...

CVE-2024-58100

In the Linux kernel, the following vulnerability has been resolved: bpf: check changespktdata property for extension programs When processing calls to global sub-programs, verifier decides whether to invalidate all packet pointers in current state depending on the changespktdata property of the...

CVE-2024-58100

CVE-2024-58100 concerns the Linux kernel BPF verifier: the changes_pkt_data property for global functions/extension programs may cause the verifier to invalidate packet pointers incorrectly when replacing a global sub-program. The referenced commits add a changes_pkt_data flag to bpf_prog_aux, se...