PT-2026-113450

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than i...

CVE-2026-83584: Use After Free

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally...

CVE-2026-83913: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-112405

Name of the Vulnerable Software and Affected Versions Windows BitLocker affected versions not specified Description An open redirect issue exists where the system can be directed to an untrusted site. This allows an unauthorized attacker to bypass a security feature through a physical attack...

CVE-2026-97800: Incorrect Permission Assignment for Critical Resource

Incorrect permission assignment for critical resource in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...

PT-2026-111973

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free issue in the HID class driver allows an unauthorized attacker to elevate privileges. This occurs during a physical attack, where the attacker can manipulate the system to gai...

PT-2026-112150

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

PT-2026-112940

Name of the Vulnerable Software and Affected Versions Windows SMB Server affected versions not specified Description A use-after-free condition in the Windows SMB Server allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...

CVE-2026-102232: Incorrect Authorization

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-96860: Out-of-bounds Read

Out-of-bounds read in Windows USB Print Driver allows an authorized attacker to disclose information locally...

CVE-2026-88124: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70164: Windows TCP/IP Elevation of Privilege Vulnerability

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

PT-2026-112308

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-69651: Inefficient Algorithmic Complexity

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-111916

Name of the Vulnerable Software and Affected Versions Windows Portable Device MTP Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Portable Device MTP Driver. This issue allows an unauthorized attacker to elevate privileges on the system throug...

CVE-2026-88140: Out-of-bounds Read

Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85866: Windows ALPC Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally...

CVE-2026-69954: Buffer Over-read

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally...

CVE-2026-108969: Incorrect Comparison

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...

CVE-2026-108266

Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certificate public key and client nonce but not to the active TLS...