Microsoft Windows: CVE-2026-85328: Windows Projected File System Elevation of Privilege Vulnerability

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...

PT-2026-112774

Name of the Vulnerable Software and Affected Versions Windows USB Video Driver affected versions not specified Description An integer overflow or wraparound occurs in the Windows USB Video Driver. This issue allows an authorized attacker to elevate privileges locally, enabling them to affect the...

CVE-2026-70294: Out-of-bounds Read

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-83587: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally...

PT-2026-111656

Name of the Vulnerable Software and Affected Versions Ivanti Connect Secure versions 25.1.1.1 through 25.1.1.1 Ivanti Connect Secure versions 25.1.2.2 through 25.1.2.2 Ivanti Connect Secure versions 22.8R2.4 through 22.8R2.4 Description An authentication bypass by spoofing allows a remote...

CVE-2026-69935: Use After Free

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-83876: Use After Free

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96918: Windows NTFS Elevation of Privilege Vulnerability

Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-108132: Windows Kerberos Elevation of Privilege Vulnerability

Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

PT-2026-111518

NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member names to a dSort job. A successful exploit may lead to...

CVE-2026-109155: Improper Limitation of a Pathname to a Restricted Directory

A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely. The project was informed of the problem early through an issue report but has not...

CVE-2026-110234: Insecure Temporary File

Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives...

PT-2026-113162

Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...

CVE-2026-102231: Improper Resolution of Path Equivalence

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-96997: Use After Free

Use after free in Microsoft Office OneNote allows an authorized attacker to elevate privileges locally...

CVE-2026-110036: Integer Overflow or Wraparound

A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service DoS by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application...

CVE-2026-96188: External Control of System or Configuration Setting

External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally...

PT-2026-113394

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server - Liberty versions 20.0.0.12 through 26.0.0.10 Description Incorrect authorization allows a remote attacker to bypass security restrictions. Recommendations At the moment, there is no information about a newer...

PT-2026-112490

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description An out-of-bounds read in the Microsoft Windows Search Component allows an authorized attacker to disclose sensitive information locally and affect the system. An...

PT-2026-112404

Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description Insufficient granularity of access control allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no...