Microsoft Windows: CVE-2026-96316: Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability

Improper access control in Windows Routing and Remote Access Service RRAS allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-88080: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88099: Windows Failover Cluster Denial of Service Vulnerability

Uncaught exception in Windows Failover Cluster allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-85865: Windows DHCP Server Security Feature Bypass Vulnerability

Improper authentication in Windows DHCP Server allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-96863: Windows Storage Port Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack...

Microsoft Windows: CVE-2026-84011: Windows SMB Client Security Feature Bypass Vulnerability

Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-69923: Windows AI Elevation of Privilege Vulnerability

Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85852: Windows Management Instrumentation Information Disclosure Vulnerability

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70113: Windows Client for NFS Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96315: Windows Overlay Filter Tampering Vulnerability

Missing authorization in Windows Overlay Filter allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-85833: Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85837: Windows Kernel Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85830: Windows Installer Information Disclosure Vulnerability

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70299: Windows Bind Filter Driver Elevation of Privilege Vulnerability

Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

Microsoft .NET: CVE-2026-70161: .NET Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-113450

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than i...

PT-2026-112294

Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.win-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.win-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.win-x64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.win-x86...

Microsoft Windows: CVE-2026-69733: Windows Update Elevation of Privilege Vulnerability

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...

PT-2026-112336

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A null pointer dereference in Windows Hyper-V allows an authorized attacker to cause a local denial of service. A null pointer dereference occurs when a program attempts to read from ...

PT-2026-113388

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use a specially crafted application archive to write files outside the intended directory...