PT-2026-112308

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...

CVE-2026-69651: Inefficient Algorithmic Complexity

Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network...

PT-2026-111916

Name of the Vulnerable Software and Affected Versions Windows Portable Device MTP Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Portable Device MTP Driver. This issue allows an unauthorized attacker to elevate privileges on the system throug...

Microsoft Windows: CVE-2026-85866: Windows ALPC Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally...

CVE-2026-69954: Buffer Over-read

Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally...

CVE-2026-108969: Incorrect Comparison

A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449. The impacted element is the function Session::checkLogin of the file include/session.php of the component Session Handler. Such manipulation of the argument...

CVE-2026-108266

Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certificate public key and client nonce but not to the active TLS...

CVE-2026-109149: Memory Allocation with Excessive Size Value

A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory allocation. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...

CVE-2026-85371: Use After Free

Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-69915: Windows NTFS Elevation of Privilege Vulnerability

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88076: Windows Installer Elevation of Privilege Vulnerability

Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2026-111999

Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-102192: Windows Failover Cluster Denial of Service Vulnerability

Integer underflow wrap or wraparound in Windows Failover Cluster allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-69967: Windows Overlay Filter Information Disclosure Vulnerability

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-103554: Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83752: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-83892: Out-of-bounds Read

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

CVE-2026-81964: Use of Hard-coded Credentials

Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-88158: Microsoft Digest Authentication Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally...

CVE-2026-69969: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...