CVE-2026-108266

Privasys rustls is a maintained fork of the rustls TLS library that adds RA-TLS challenge and channel-binding support. Prior to privasys-v0.8.1, the fork emitted RA-TLS challenge certificates whose quote ReportData was bound to the certificate public key and client nonce but not to the active TLS...

CVE-2026-109149: Memory Allocation with Excessive Size Value

A weakness has been identified in beautifier js-beautify up to 1.15.1/2.0.3. The affected element is an unknown function. Executing a manipulation can lead to uncontrolled memory allocation. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not...

CVE-2026-85371: Use After Free

Use after free in Network Policy Server NPS allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-69915: Windows NTFS Elevation of Privilege Vulnerability

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88076: Windows Installer Elevation of Privilege Vulnerability

Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2026-111999

Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally...

CVE-2026-83741: Use After Free

Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally...

CVE-2026-108962: Improper Control of Generation of Code

A vulnerability has been found in storyicon comfyuisegmentanything up to ab6395596399d5048639cdab7e44ec9fae857a93. Affected by this issue is the function SLConfig.file2dict of the file localgroundingdino/util/slconfig.py of the component GroundingDINO Model Loading. Such manipulation of the...

CVE-2026-83740: Use After Free

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-70230: Use After Free

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

PT-2026-111976

Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description Incorrect default permissions in the service allow an authorized attacker to elevate privileges locally, which enables them to affect the system. Recommendations At the...

Microsoft Windows: CVE-2026-85328: Windows Projected File System Elevation of Privilege Vulnerability

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...

PT-2026-112102

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A use-after-free condition in Windows NTFS enables an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...

Microsoft Windows: CVE-2026-70118: Windows Audio Service Elevation of Privilege Vulnerability

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

PT-2026-112712

Allocation of resources without limits or throttling in Active Directory Federation Services AD FS allows an unauthorized attacker to deny service over a network...

Google Chrome Microsoft Edge Unauthorized Access

The vulnerability in the Downloads component of Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability enables a remote attacker to gain unauthorized access to protected information via a specially crafted HTML page...

Microsoft Windows: CVE-2026-70235: Windows Event Tracing Spoofing Vulnerability

Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally...

DevTools Suite DoS

The vulnerability in Google Chrome and Microsoft Edge DevTools web development tools is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Microsoft Windows: CVE-2026-85332: Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83859: Windows NTFS Elevation of Privilege Vulnerability

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...