CVE-2026-69589: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69652: Use After Free

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-68827: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...

PT-2026-87266

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description An integer underflow wrap or wraparound occurs in Windows GDI+, which is a graphics API used for rendering 2D and 3D graphics. This issue allows an authorized attacker to elevate...

CVE-2026-69272: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

CVE-2026-72926: Use After Free

Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...

CVE-2026-73002: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69407: Integer Overflow or Wraparound

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally...

PT-2026-87479

Name of the Vulnerable Software and Affected Versions Windows Management Instrumentation affected versions not specified Description A use after free issue in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network. Use after free is a memory corrupti...

PT-2026-87381

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow occurs in Windows NTFS, which is a common file system used for organizing and storing files on hard disk drives. This issue allows an authorized attacker to...

PT-2026-87343

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A use-after-free condition in the Windows Device Association Service allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory...

CVE-2026-69489: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

PT-2026-87351

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A use-after-free condition in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory...

CVE-2026-69785: Untrusted Search Path

Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...

CVE-2026-67370: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-71333: Use After Free

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-69608: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-70583: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally...

CVE-2026-83954: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69448: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...