PT-2026-112608

Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

PT-2026-112438

Name of the Vulnerable Software and Affected Versions Windows Graphics Kernel affected versions not specified Description A use after free issue in the Windows Graphics Kernel allows an authorized attacker to locally disclose sensitive information, which can impact the system. Recommendations At...

PT-2026-112441

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description The use of an externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information abou...

PT-2026-112451

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...

Microsoft Windows: CVE-2026-69387: Windows Error Reporting Elevation of Privilege Vulnerability

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69718: Windows Update Elevation of Privilege Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Windows Update allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69882: Windows Update Elevation of Privilege Vulnerability

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-81969: Windows Server Update Service Elevation of Privilege Vulnerability

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83655: Network Policy Server (NPS) Denial of Service Vulnerability

Out-of-bounds read in Network Policy Server NPS allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-83500: Windows BitLocker Security Feature Bypass Vulnerability

Url redirection to untrusted site 'open redirect' in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

Microsoft Windows: CVE-2026-83510: Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85830: Windows Installer Information Disclosure Vulnerability

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85831: Windows Biometric Service Information Disclosure Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85833: Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85834: Windows TCP/IP Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85836: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85837: Windows Kernel Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85840: Windows Event Viewer Information Disclosure Vulnerability

Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network...

Microsoft Windows: CVE-2026-85850: Windows Kernel Elevation of Privilege Vulnerability

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-84011: Windows SMB Client Security Feature Bypass Vulnerability

Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally...