PT-2026-58509

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use after free issue in the Windows Clipboard Server allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application...

PT-2026-58146

Name of the Vulnerable Software and Affected Versions Microsoft Windows Speech affected versions not specified Description A use-after-free condition in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs wh...

PT-2026-58682

Name of the Vulnerable Software and Affected Versions ASP.NET Core affected versions not specified Description An incorrect implementation of the authentication algorithm allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information abo...

PT-2026-58180

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A race condition exists in the Windows Kernel, occurring when concurrent execution uses a shared resource with improper synchronization. This flaw allows an authorized attacker to...

PT-2026-58414

Name of the Vulnerable Software and Affected Versions Windows Overlay Filter affected versions not specified Description A buffer over-read in the Windows Overlay Filter allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the...

PT-2026-58122

Name of the Vulnerable Software and Affected Versions Windows App Store affected versions not specified Description A race condition occurs when multiple processes access a shared resource concurrently without proper synchronization. In the Windows App Store, this flaw allows an unauthorized...

PT-2026-58357

Name of the Vulnerable Software and Affected Versions Windows DirectX affected versions not specified Description A heap-based buffer overflow exists in Windows DirectX. This issue allows an authorized attacker to elevate privileges locally, potentially granting full control over the system. A...

PT-2026-58390

Name of the Vulnerable Software and Affected Versions Active Directory Federation Services affected versions not specified Description A stack-based buffer overflow exists in Active Directory Federation Services AD FS, which allows an unauthenticated attacker to remotely trigger a denial of servi...

PT-2026-58452

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A heap-based buffer overflow exists in the Windows Kernel. This issue allows an authorized attacker to elevate privileges locally, potentially gaining kernel-level access to the system...

PT-2026-58171

Name of the Vulnerable Software and Affected Versions Windows Local Security Authority Subsystem Service LSASS affected versions not specified Description Uncontrolled resource consumption in the Local Security Authority Subsystem Service LSASS allows an authorized attacker to cause a denial of...

PT-2026-58119

Name of the Vulnerable Software and Affected Versions Windows Local Security Authority Subsystem Service LSASS affected versions not specified Description An issue in the Windows Local Security Authority Subsystem Service LSASS occurs when memory allocation is performed with an excessive size...

PT-2026-58401

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An out-of-bounds read in the Windows NTFS file system allows an authorized local attacker to elevate their privileges. An out-of-bounds read occurs when a program reads data past the end...

PT-2026-58477

Name of the Vulnerable Software and Affected Versions Windows Runtime affected versions not specified Description An elevation-of-privilege issue exists due to a race condition, which occurs when concurrent execution using a shared resource lacks proper synchronization. This allows an authorized...

PT-2026-58201

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use after free issue in the Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application...

PT-2026-58656

Name of the Vulnerable Software and Affected Versions Windows USB Print Driver affected versions not specified Description A race condition occurs in the Windows USB Print Driver due to improper synchronization when using a shared resource. This allows an authorized attacker with physical access ...

PT-2026-58377

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Windows Server 2025 affected versions not specified Description A race condition exists in Windows Media, where concurrent execution using a shared resource with improper synchronization allows an...

PT-2026-58647

Name of the Vulnerable Software and Affected Versions Microsoft Input Method Editor IME affected versions not specified Description A heap-based buffer overflow occurs in the Microsoft Input Method Editor IME, which is a system component that allows users to input characters for languages that do...

PT-2026-58063

A vulnerability was found in svgdotjs svg.js up to 3.2.5. This affects the function EventTarget.on of the file svgdotjs/svg.js of the component npm Package API. Performing a manipulation results in improperly controlled modification of object prototype attributes. The attack may be initiated...

PT-2026-58362

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description A heap-based buffer overflow occurs in Windows GDI+, which is a graphics API used for rendering images and shapes. This flaw allows an unauthorized remote attacker to execute arbitrary...

CVE-2025-56361

A reachable assertion vulnerability exists in the Matter SDK connectedhomeip 1.3 thru 1.4, specifically within the Level Control cluster's server tick logic emberAfLevelControlClusterServerTickCallback. When a MoveToLevel command is executed and followed by a conflicting write to the OperationMod...