CVE-2026-96849: Use of Uninitialized Resource

Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally...

PT-2026-111163

A flaw has been found in yoshitomo-matsubara torchdistill up to 1.1.5. This affects the function load ckpt of the file torchdistill/common/main util.py. Executing a manipulation of the argument src ckpt can lead to deserialization. The attack needs to be launched locally. The exploit has been...

CVE-2026-83842: Double Free

Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83505: Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70292: Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

PT-2026-113337

Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session identifier in a victim's browser prior to login. Attackers can exploit the application's failure to regenerate the session id...

PT-2026-113082

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-113080

Name of the Vulnerable Software and Affected Versions Windows Overlay Filter affected versions not specified Description Missing authorization in the Windows Overlay Filter allows an authorized attacker to perform local tampering, which can affect the system. Recommendations At the moment, there ...

PT-2026-112810

Name of the Vulnerable Software and Affected Versions Windows AppX Deployment Service affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations A...

PT-2026-112977

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Bind Filter Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based...

CVE-2026-83839: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

PT-2026-111389

Name of the Vulnerable Software and Affected Versions Industrial Edge App Publisher versions prior to V1.27.9 Description The software fails to properly validate the server certificate during the initiation of a TLS connection. This flaw enables a Man-in-the-Middle attack, where an attacker can...

PT-2026-112353

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description An issue exists where improper neutralization of special elements used in an SQL command leads to SQL injection. This allows an authorized attacker to elevate privileges...

PT-2026-112672

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

CVE-2026-83668: Out-of-bounds Read

Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally...

PT-2026-112199

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description An out-of-bounds read exists in Windows DNS, which allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment, there is no information about a...

PT-2026-112640

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when the software reads data past the end of the...

PT-2026-112646

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A use-after-free issue in Windows Win32K allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs when an application continu...

Microsoft Windows: CVE-2026-83666: Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

PT-2026-112611

Name of the Vulnerable Software and Affected Versions Windows Internet wininet.dll affected versions not specified Description Improper privilege management in the Windows Internet component allows an authorized attacker to perform local spoofing, which can be used to affect the system...