PT-2026-87943

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description Weak authentication allows an authorized attacker to elevate privileges over a network, which can lead to unauthorized system impact. Recommendations At the moment, there is no information...

CVE-2026-69875: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-69301: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges over a network...

CVE-2026-81349: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an os command 'os command injection' in Azure HDInsights allows an authorized attacker to elevate privileges over a network...

CVE-2026-69585: Incorrect Type Conversion or Cast

Incorrect type conversion or cast in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-69805: External Control of File Name or Path

External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69394: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72948: Relative Path Traversal

Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally...

CVE-2026-72929: Improper Validation of Integrity Check Value

Improper validation of integrity check value in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-71338: Double Free

Double free in Windows Failover Cluster allows an authorized attacker to elevate privileges locally...

CVE-2026-71332: Use After Free

Use after free in Windows Secure Socket Tunneling Protocol SSTP allows an authorized attacker to elevate privileges locally...

CVE-2026-69469: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-72958: Double Free

Double free in Windows Credential Guard allows an authorized attacker to elevate privileges locally...

CVE-2026-71334: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NFS Portmapper allows an authorized attacker to elevate privileges locally...

CVE-2026-71333: Use After Free

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-69716: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-69589: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69583: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69549: Out-of-bounds Read

Out-of-bounds read in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70564: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...