Microsoft Windows: CVE-2026-83505: Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

PT-2026-112601

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description A buffer over-read in the Windows Common Log File System Driver allows an authorized attacker to disclose sensitive information locally and affect the system. A...

CVE-2026-83841: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96317: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88158: Microsoft Digest Authentication Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Digest Authentication allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-88124: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96215: Windows Autopilot Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Autopilot allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85367: Windows Cash Drawer Protocol Provider Elevation of Privilege Vulnerability

Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70134: Windows Event Tracing Elevation of Privilege Vulnerability

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85364: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96928: Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70011: Windows IP Over USB Service Information Disclosure Vulnerability

Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96308: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96316: Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability

Improper access control in Windows Routing and Remote Access Service RRAS allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-88080: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88099: Windows Failover Cluster Denial of Service Vulnerability

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-85865: Windows DHCP Server Security Feature Bypass Vulnerability

Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-96863: Windows Storage Port Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack...

Microsoft Windows: CVE-2026-84011: Windows SMB Client Security Feature Bypass Vulnerability

Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-69923: Windows AI Elevation of Privilege Vulnerability

Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally...