CVE-2026-73014: Missing Authorization

Missing authorization in Data Sharing Service Client allows an authorized attacker to elevate privileges locally...

CVE-2026-69271: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges over a network...

CVE-2026-69423: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-69420: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally...

CVE-2026-69740: Use After Free

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69758: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69681: Heap-based Buffer Overflow

Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-69717: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network...

CVE-2026-69418: Heap-based Buffer Overflow

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-69371: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges over a network...

CVE-2026-69368: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-81822: Use of a Broken or Risky Cryptographic Algorithm

The vulnerability, if exploited, could allow a miscreant with read access to PIMBoards project files to reverse engineer PIMBoards users’ app-native passwords through computational brute-forcing of weak hashes, potentially allowing elevation to a PIMBoards administrator user...

CVE-2026-72965: Use After Free

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally...

PT-2026-87524

Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-69619: Out-of-bounds Read

Out-of-bounds read in Windows exFAT File System allows an authorized attacker to elevate privileges over a network...

CVE-2026-83939: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally...

CVE-2026-69838: Use After Free

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-78451: Untrusted Pointer Dereference

Untrusted pointer dereference in Microsoft Windows SCSI Class System File allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-66819: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-88606

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A privilege elevation issue exists in the WebUI. A remote attacker who has already compromised the renderer process can potentially execute arbitrary code outside the sandbox by using a...