CVE-2026-85910: Buffer Over-read

Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally...

CVE-2026-83669: Use of Uninitialized Resource

Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-85852: Out-of-bounds Read

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...

CVE-2026-87708: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-69942: Buffer Over-read

Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally...

CVE-2026-70077: Use After Free

Use after free in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2026-18318: Improper Restriction of Excessive Authentication Attempts

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain credentials due to improper authentication...

CVE-2026-70272: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-83904: Out-of-bounds Read

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

CVE-2026-69919: Out-of-bounds Read

Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

CVE-2026-70135: Out-of-bounds Read

Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally...

CVE-2026-85864: Improper Restriction of Names for Files and Other Resources

Improper privilege management in Python allows an authorized attacker to elevate privileges locally...

CVE-2026-69718: Improper Neutralization of Special Elements used in a Command

Improper neutralization of special elements used in a command 'command injection' in Windows Update allows an authorized attacker to elevate privileges locally...

PT-2026-116155

🚨 CVE-2026-108576 A vulnerability was found in TOZED X300 up to 6.01.3. This vulnerability affects the function process ping of the component IPPingDiagnostics Handler. The manipulation of the argument Host results in os command injection. The attack can be launched remotely. The vendor was...

CVE-2026-85836: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-83762: Use After Free

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-70185: Authorization Bypass Through User-Controlled Key

Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally...

CVE-2026-85865: Authentication Bypass Using an Alternate Path or Channel

Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally...

CVE-2026-83499: Insufficient Granularity of Access Control

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83907: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally...