2999 matches found
PT-2026-32809
Name of the Vulnerable Software and Affected Versions Windows SSDP Service affected versions not specified Description A race condition occurs in the Windows SSDP Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally...
PT-2026-32873
CVE-2026-33099 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. https://t.co/FciJfCRRR2...
PT-2026-32818
Name of the Vulnerable Software and Affected Versions Function Discovery Service fdwsd.dll affected versions not specified Description A race condition occurs in the Function Discovery Service fdwsd.dll due to concurrent execution using a shared resource with improper synchronization. This allows...
PT-2026-32806
CVE-2026-32080 Use after free in Windows WalletService allows an authorized attacker to elevate privileges locally. https://t.co/ot43xvauta...
PT-2026-32771
CVE-2026-27909 Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. https://t.co/EEmqZf1GgX...
PT-2026-32728
Name of the Vulnerable Software and Affected Versions Applocker Filter Driver applockerfltr.sys affected versions not specified Description A race condition occurs in the Applocker Filter Driver applockerfltr.sys due to concurrent execution using a shared resource with improper synchronization...
PT-2026-32759
CVE-2026-26182 Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. https://t.co/71akLF9U1Q...
PT-2026-32819
CVE-2026-32149 Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally. https://t.co/jAvCgQ0s60...
PT-2026-32768
Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description Improper input validation allows an authorized attacker to bypass a security feature locally, which can affect the system. Recommendations At the moment, there is no information about a...
PT-2026-32815
Name of the Vulnerable Software and Affected Versions Windows Speech Brokered Api affected versions not specified Description A use after free issue in Windows Speech Brokered Api allows an authorized attacker to elevate privileges locally. Use after free is a condition where a program continues ...
PT-2026-32825
CVE-2026-32155 Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally. https://t.co/YdFtqviArJ...
PT-2026-32847
Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A stack-based buffer overflow in the Windows Kernel allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow occurs when a program writes more data to...
PT-2026-32757
Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A heap-based buffer overflow in the Windows Kernel allows an authorized attacker to elevate privileges locally, which can affect the system. Recommendations At the moment, there is no...
PT-2026-32751
Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description A race condition occurs due to concurrent execution using a shared resource with improper synchronization. This allows an authorized attacker to elevate privileges...
PT-2026-32840
Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description Improper privilege management in the Telemetry Service allows an authorized attacker to cause a local denial of service, which affects the system. Recommendations At the moment, the...
BIT-DOTNET-SDK-2026-26131 .NET Elevation of Privilege Vulnerability
Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally...
BIT-DOTNET-2026-26131 .NET Elevation of Privilege Vulnerability
Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally...
EUVD-2026-18556
Server-side request forgery ssrf in Azure Custom Locations Resource Provider RP allows an authorized attacker to elevate privileges over a network...
EUVD-2026-18290
Endian Firewall version 3.3.25 and prior allow stored cross-site scripting XSS via the dscp parameter to /manage/qos/rules/. An authenticated attacker can inject arbitrary JavaScript that is stored and executed when other users view the affected page...