CVE-2026-69979: Improper Protection of Alternate Path

Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally...

CVE-2026-69945: Missing Authorization

Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally...

CVE-2026-88174: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69914: Out-of-bounds Read

Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...

PT-2026-112101

Name of the Vulnerable Software and Affected Versions Windows AppX Deployment Service affected versions not specified Description An out-of-bounds read in the Windows AppX Deployment Service allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when the...

CVE-2026-85934: Use After Free

Use after free in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...

PT-2026-112810

Name of the Vulnerable Software and Affected Versions Windows AppX Deployment Service affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations A...

PT-2026-112098

Name of the Vulnerable Software and Affected Versions Windows AppX Deployment Service affected versions not specified Description Missing authorization in the Windows AppX Deployment Service allows an authorized attacker to perform local tampering. Recommendations At the moment, there is no...

Windows Deployment Services Code Execution

The vulnerability of Windows Deployment Services for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Windows Deployment Services Code Execution

The vulnerability of Windows Deployment Services for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Windows Deployment Services Code Execution

The vulnerability of Windows Deployment Services for Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-69905: Missing Authorization

Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally...

CVE-2026-97793: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...

PT-2026-112982

Name of the Vulnerable Software and Affected Versions Windows Deployment Services affected versions not specified Description An improper synchronization issue, known as a race condition, occurs during concurrent execution using a shared resource. This allows an unauthorized attacker to execute...

CVE-2026-69969: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...

CVE-2026-85849: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally...

PT-2026-111179

Name of the Vulnerable Software and Affected Versions GitLab EE versions 13.6 through 19.2.7 GitLab EE versions 19.3 through 19.3.4 GitLab EE versions 19.4 through 19.4.1 Description Insufficient access control checks allow an authenticated user with limited permissions to modify project CI/CD...

Microsoft Windows: CVE-2026-69905: Windows AppX Deployment Service Tampering Vulnerability

Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-69969: Windows AppX Deployment Service Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-97793: Windows Setup and Deployment Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...