4936 matches found
PT-2026-47914
Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A race condition occurs in Windows Push Notifications due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges...
PT-2026-48118
šØ CVE-2026-49161 Improper access control in Microsoft PC Manager allows an authorized attacker to bypass a security feature locally. š@cveNotify...
PT-2026-47884
Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
PT-2026-47903
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
PT-2026-47881
šØ CVE-2026-42902 Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally. š@cveNotify...
PT-2026-48043
Name of the Vulnerable Software and Affected Versions Windows Boot Manager affected versions not specified Description A protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information...
PT-2026-47885
Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information locally...
PT-2026-48112
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. Secure Boot is a security standard that ensures a device boots using...
PT-2026-47963
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network. Cross-si...
PT-2026-48036
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network. Cross-si...
PT-2026-48037
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting, which allows an authorized attacker to perform spoofing over a network. Cross-si...
PT-2026-48113
Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use-after-free condition in the Windows Kernel allows an authorized attacker to perform a local elevation of privilege, enabling them to gain administrative access to the system...
PT-2026-48010
Name of the Vulnerable Software and Affected Versions Microsoft Defender for Endpoint for Mac affected versions not specified Description A time-of-check time-of-use TOCTOU race condition occurs in Microsoft Defender for Endpoint. This is a software bug where a system checks a condition such as a...
PT-2026-48006
Name of the Vulnerable Software and Affected Versions Microsoft Azure Attestation service affected versions not specified Device Health Attestation Service affected versions not specified Description Improper input validation in these services allows an authorized attacker to perform spoofing via...
PT-2026-47922
Use after free in Windows Network Controller NC Host Agent allows an authorized attacker to deny service locally...
PT-2026-47896
Out-of-bounds read in Windows Telephony Service allows an authorized attacker to disclose information locally...
PT-2026-47911
Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A use-after-free issue in the Microsoft Graphics Component allows an authorized attacker with low privileges to perform a local elevation of privilege. Use-after-free is ...
PT-2026-47987
Name of the Vulnerable Software and Affected Versions Windows Ancillary Function Driver for WinSock affected versions not specified Description A use-after-free issue in the Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally. Use-after-free i...