CVE-2026-83695: Use of Uninitialized Resource

Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally...

CVE-2026-83566: Use After Free

Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...

CVE-2026-83682: Use After Free

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

PT-2026-112880

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

CVE-2026-88073: Use After Free

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-83582: Use After Free

Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally...

CVE-2026-69673: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update allows an authorized attacker to elevate privileges locally...

CVE-2026-70197: Out-of-bounds Write

Out-of-bounds write in .NET allows an unauthorized attacker to execute code over a network...

CVE-2026-83845: Authentication Bypass by Spoofing

Improper privilege management in Windows Internet wininet.dll allows an authorized attacker to perform spoofing locally...

CVE-2026-83728: Improper Validation of Syntactic Correctness of Input

Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally...

CVE-2026-85852: Out-of-bounds Read

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...

CVE-2026-87694: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-70140: Use After Free

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-88135: Missing Authorization

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87712: Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability

Use after free in Windows Quality of Service QoS Packet Scheduler allows an authorized attacker to elevate privileges locally...

CVE-2026-85830: Out-of-bounds Read

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally...

CVE-2026-108941: Improper Control of Generation of Code

A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parsecfgargs of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfgargs leads to code injection. The attack can only be performed from a local...

CVE-2026-70211: Out-of-bounds Read

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-109116: Authorization Bypass Through User-Controlled Key

A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c. Impacted is the function mysqliquery of the component Order Management. Executing a manipulation of the argument ID can lead to authorization bypass. The attack can be...

PT-2026-111327

Name of the Vulnerable Software and Affected Versions AdithyaYelloju Restaurant-Management-System affected versions not specified Description An authorization bypass exists in the Order Management component. A remote attacker can manipulate the ID argument within the mysqli query function to bypa...