PT-2026-112774

Name of the Vulnerable Software and Affected Versions Windows USB Video Driver affected versions not specified Description An integer overflow or wraparound occurs in the Windows USB Video Driver. This issue allows an authorized attacker to elevate privileges locally, enabling them to affect the...

PT-2026-112779

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description An issue in the Windows Bind Filter Driver allows an authorized attacker to locally disclose sensitive information by accessing files or directories that should be restrict...

PT-2026-112801

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-112761

Name of the Vulnerable Software and Affected Versions Windows Sysmain Service affected versions not specified Description Exposure of sensitive system information to an unauthorized control sphere in the Windows Sysmain Service allows an authorized attacker to disclose information locally...

PT-2026-113442

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A use-after-free condition exists that allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue where an application continues to use a...

PT-2026-112855

Name of the Vulnerable Software and Affected Versions Windows BitLocker affected versions not specified Description A time-of-check time-of-use toctou race condition exists in Windows BitLocker. This occurs when a program checks the state of a resource before using it, but the state changes betwe...

PT-2026-112850

Name of the Vulnerable Software and Affected Versions Windows Clipboard User Service affected versions not specified Description A race condition occurs in the Windows Clipboard User Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevat...

PT-2026-112898

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2026-112655

Name of the Vulnerable Software and Affected Versions Windows Clipboard User Service affected versions not specified Description An issue in the Windows Clipboard User Service allows an authorized attacker to locally disclose sensitive system information to an unauthorized control sphere...

PT-2026-112624

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-112569

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A race condition occurs when concurrent execution using a shared resource lacks proper synchronization. This allows an authorized attacker to elevate privileges locally on the syste...

PT-2026-112574

Name of the Vulnerable Software and Affected Versions Windows CCFFilter Driver affected versions not specified Description A use after free issue in the Windows CCFFilter Driver allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Use after free i...

PT-2026-112629

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description Improper access control in Windows NTFS allows an authorized attacker to disclose information locally. Recommendations At the moment, there is no information about a newer version that...

PT-2026-112619

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

PT-2026-112693

Name of the Vulnerable Software and Affected Versions Windows Group Policy affected versions not specified Description A heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more...

PT-2026-112656

Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack...

PT-2026-111838

Snowy 3.6.5 contains a hard-coded HMAC key vulnerability that allows unauthenticated attackers to forge download signatures for the /dev/file/download endpoint by using the published FILE DOWNLOAD SIGN SECRET constant. Attackers can compute HMAC-SHA256 signatures of guessed file ids offline to...

PT-2026-112378

Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description An out-of-bounds read in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment, ther...

PT-2026-112363

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

PT-2026-112377

Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description An authorized attacker can locally disclose sensitive information due to the use of an uninitialized resource in the Windows Win32 Kernel Subsystem. Recommendations At...