PT-2026-112898

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2026-112655

Name of the Vulnerable Software and Affected Versions Windows Clipboard User Service affected versions not specified Description An issue in the Windows Clipboard User Service allows an authorized attacker to locally disclose sensitive system information to an unauthorized control sphere...

PT-2026-112624

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-112569

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A race condition occurs when concurrent execution using a shared resource lacks proper synchronization. This allows an authorized attacker to elevate privileges locally on the syste...

PT-2026-112574

Name of the Vulnerable Software and Affected Versions Windows CCFFilter Driver affected versions not specified Description A use after free issue in the Windows CCFFilter Driver allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Use after free i...

PT-2026-112629

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description Improper access control in Windows NTFS allows an authorized attacker to disclose information locally. Recommendations At the moment, there is no information about a newer version that...

PT-2026-112619

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

PT-2026-112693

Name of the Vulnerable Software and Affected Versions Windows Group Policy affected versions not specified Description A heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more...

PT-2026-112656

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack...

PT-2026-111838

Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows unauthenticated attackers to forge download signatures for the /dev/file/download endpoint by using the published FILE DOWNLOAD SIGN SECRET constant. Attackers can compute HMAC-SHA256 signatures of guessed file ids offline to...

PT-2026-112378

Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description An out-of-bounds read in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment, ther...

PT-2026-112363

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

PT-2026-112377

Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description An authorized attacker can locally disclose sensitive information due to the use of an uninitialized resource in the Windows Win32 Kernel Subsystem. Recommendations At...

PT-2026-113388

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use a specially crafted application archive to write files outside the intended directory...

PT-2026-112303

Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description A use-after-free condition in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issu...

PT-2026-112353

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description An issue exists where improper neutralization of special elements used in an SQL command leads to SQL injection. This allows an authorized attacker to elevate privileges...

PT-2026-112326

Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description A use-after-free condition in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issu...

PT-2026-112322

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue exists where sensitive system information is exposed to an unauthorized control sphere, allowing an authorized attacker to disclose information locally. Recommendations At the...

PT-2026-112056

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting memory. This issue allows an authorized attacker ...

PT-2026-112063

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A heap-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges through a physical attack. A heap-based buffer overflow is a memo...