Microsoft Windows: CVE-2026-85336: Windows Device Association Service Information Disclosure Vulnerability

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85332: Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85343: Windows Hyper-V Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83901: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70128: HID Parser Library Information Disclosure Vulnerability

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85865: Windows DHCP Server Security Feature Bypass Vulnerability

Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally...

PT-2026-112557

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A use-after-free issue in Windows Win32K allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continu...

PT-2026-112578

Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description An absolute path traversal issue exists in the Windows Encrypting File System EFS. This allows an authorized attacker to elevate privileges over a network...

PT-2026-112603

Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

PT-2026-112586

Name of the Vulnerable Software and Affected Versions Windows Device Install Service affected versions not specified Description Incorrect authorization in the Windows Device Install Service allows an authorized attacker to elevate privileges locally, which can lead to full system compromise...

PT-2026-112611

Name of the Vulnerable Software and Affected Versions Windows Internet wininet.dll affected versions not specified Description Improper privilege management in the Windows Internet component allows an authorized attacker to perform local spoofing, which can be used to affect the system...

PT-2026-112569

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A race condition occurs when concurrent execution using a shared resource lacks proper synchronization. This allows an authorized attacker to elevate privileges locally on the syste...

PT-2026-112481

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description An integer underflow wrap or wraparound occurs, which allows an authorized attacker to elevate privileges locally and affect the system. Integer underflow is a condition where a...

PT-2026-112500

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A use-after-free condition in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

PT-2026-112487

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

PT-2026-112558

Name of the Vulnerable Software and Affected Versions Windows Input System affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to elevate privileges locally on the system...

PT-2026-112584

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

PT-2026-112601

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description A buffer over-read in the Windows Common Log File System Driver allows an authorized attacker to disclose sensitive information locally and affect the system. A...

PT-2026-112559

Name of the Vulnerable Software and Affected Versions Windows Clipboard User Service affected versions not specified Description Incorrect authorization in the Windows Clipboard User Service allows an authorized attacker to disclose information locally. Recommendations At the moment, there is no...

PT-2026-112655

Name of the Vulnerable Software and Affected Versions Windows Clipboard User Service affected versions not specified Description An issue in the Windows Clipboard User Service allows an authorized attacker to locally disclose sensitive system information to an unauthorized control sphere...