PT-2026-58401

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An out-of-bounds read in the Windows NTFS file system allows an authorized local attacker to elevate their privileges. An out-of-bounds read occurs when a program reads data past the end...

PT-2026-58119

Name of the Vulnerable Software and Affected Versions Windows Local Security Authority Subsystem Service LSASS affected versions not specified Description An issue in the Windows Local Security Authority Subsystem Service LSASS occurs when memory allocation is performed with an excessive size...

PT-2026-58414

Name of the Vulnerable Software and Affected Versions Windows Overlay Filter affected versions not specified Description A buffer over-read in the Windows Overlay Filter allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the...

PT-2026-58122

Name of the Vulnerable Software and Affected Versions Windows App Store affected versions not specified Description A race condition occurs when multiple processes access a shared resource concurrently without proper synchronization. In the Windows App Store, this flaw allows an unauthorized...

PT-2026-58656

Name of the Vulnerable Software and Affected Versions Windows USB Print Driver affected versions not specified Description A race condition occurs in the Windows USB Print Driver due to improper synchronization when using a shared resource. This allows an authorized attacker with physical access ...

PT-2026-58171

Name of the Vulnerable Software and Affected Versions Windows Local Security Authority Subsystem Service LSASS affected versions not specified Description Uncontrolled resource consumption in the Local Security Authority Subsystem Service LSASS allows an authorized attacker to cause a denial of...

PT-2026-58377

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows Server 2025 affected versions not specified Description A race condition exists in Windows Media, where concurrent execution using a shared resource with improper synchronization allows an...

PT-2026-58390

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description A stack-based buffer overflow exists in Active Directory Federation Services AD FS, which allows an unauthenticated attacker to remotely trigger a denial of servi...

PT-2026-58180

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A race condition exists in the Windows Kernel, occurring when concurrent execution uses a shared resource with improper synchronization. This flaw allows an authorized attacker to...

PT-2026-58452

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A heap-based buffer overflow exists in the Windows Kernel. This issue allows an authorized attacker to elevate privileges locally, potentially gaining kernel-level access to the system...

PT-2026-58569

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...

PT-2026-58357

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A heap-based buffer overflow exists in Windows DirectX. This issue allows an authorized attacker to elevate privileges locally, potentially granting full control over the system. A...

PT-2026-58637

Name of the Vulnerable Software and Affected Versions Windows Subsystem for Linux versions prior to 2.7.10 Description A time-of-check time-of-use TOCTOU race condition exists in the Windows Subsystem for Linux. This flaw allows an authorized local attacker to perform data tampering. A TOCTOU rac...

PT-2026-58362

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description A heap-based buffer overflow occurs in Windows GDI+, which is a graphics API used for rendering images and shapes. This flaw allows an unauthorized remote attacker to execute arbitrary...

PT-2026-58647

Name of the Vulnerable Software and Affected Versions Microsoft Input Method Editor IME affected versions not specified Description A heap-based buffer overflow occurs in the Microsoft Input Method Editor IME, which is a system component that allows users to input characters for languages that do...

PT-2026-58682

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description An incorrect implementation of the authentication algorithm allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information abo...

PT-2026-58509

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use after free issue in the Windows Clipboard Server allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application...

PT-2026-58477

Name of the Vulnerable Software and Affected Versions Windows Runtime affected versions not specified Description An elevation-of-privilege issue exists due to a race condition, which occurs when concurrent execution using a shared resource lacks proper synchronization. This allows an authorized...

PT-2026-58696

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An issue exists where the allocation of resources occurs without limits or throttling, which allows an unauthorized attacker to cause a denial-of-service condition over a network. Recommendation...

PT-2026-58201

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use after free issue in the Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application...