Microsoft Windows: CVE-2026-88143: Windows Storage Spaces Controller Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

Microsoft Office: CVE-2026-70276: Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83709: Windows NTLM Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83721: Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83732: Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83781: Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83736: Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85872: Windows Storage VSP Driver Elevation of Privilege Vulnerability

Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83840: Windows Error Reporting Elevation of Privilege Vulnerability

Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83903: Windows Direct Composition Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85902: Windows Direct Composition Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85867: Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96220: Windows Assigned Access Elevation of Privilege Vulnerability

Improper control of generation of code 'code injection' in Windows Assigned Access allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96223: Windows Hyper-V Elevation of Privilege Vulnerability

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96244: Windows Internal System User Profile Elevation of Privilege Vulnerability

Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96863: Windows Storage Port Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack...

Microsoft Windows: CVE-2026-96920: Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85328: Windows Projected File System Elevation of Privilege Vulnerability

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...

Stable Channel Update for Desktop

The Stable channel has been updated to 155.0.8059.79/.80 for Windows and Mac and 155.0.8059.79 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes and Rewards Note: Access to bug details and links may be kept...

PT-2026-112719

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description Weak authentication in the Windows Projected File System allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no...