306177 matches found
PT-2026-112396
Name of the Vulnerable Software and Affected Versions Windows Setup Files Cleanup affected versions not specified Description External control of system or configuration settings allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...
PT-2026-112102
Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A use-after-free condition in Windows NTFS enables an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...
PT-2026-112411
Name of the Vulnerable Software and Affected Versions Windows Setup Files Cleanup affected versions not specified Description An untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...
CVE-2026-88070: Out-of-bounds Read
Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally...
CVE-2026-83790: Use After Free
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...
CVE-2026-70222: Relative Path Traversal
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-88080: Use After Free
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-83676: Integer Underflow (Wrap or Wraparound)
Integer underflow wrap or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2026-85835: Buffer Over-read
Buffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally...
Microsoft Windows: CVE-2026-97790: Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability
Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...
CVE-2026-109156: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function extractenv of the file mlserver/env.py of the component environmenttarball Handler. Such manipulation leads to path traversal. The attack may be performed from remote. The vendor was contacted early about th...
CVE-2026-109519: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template Rendering. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The...
Microsoft Windows: CVE-2026-70216: Windows Mobile Device Management Tampering Vulnerability
Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...
CVE-2026-83755: Use of Uninitialized Resource
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally...
CVE-2026-83659: Improper Link Resolution Before File Access
Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...
CVE-2026-109403: Server-Side Request Forgery (SSRF)
A vulnerability was determined in conductor-oss conductor up to 3.32.5. Affected by this vulnerability is the function A2AService.getAgentCard of the file ai/src/main/java/org/conductoross/conductor/ai/a2a/A2AService.java of the component Agent Card Fetching. Executing a manipulation of the...
CVE-2026-96863: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack...
CVE-2026-83798: Improper Verification of Cryptographic Signature
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally...
Microsoft Windows: CVE-2026-70160: Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...