CVE-2026-69322: Double Free

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...

CVE-2026-69578: Numeric Truncation Error

Numeric truncation error in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-69707: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69619: Out-of-bounds Read

Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network...

CVE-2026-69648: Use After Free

Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...

CVE-2026-80097: Improper Authentication

Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally...

CVE-2026-80096: Out-of-bounds Read

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

CVE-2026-69875: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...

PT-2026-87213

Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-81822: Use of a Broken or Risky Cryptographic Algorithm

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords through computational brute-forcing of weak hashes, potentially allowing elevation to a PIMBoards administrator user...

CVE-2026-66819: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-73028: Improper Access Control

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-73026: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-73024: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-77487: Improper Access Control

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-77483: Weak Authentication

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-73007: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83987: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83995: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-83977: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...