CVE-2026-69338: Use After Free

Use after free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69300: Use After Free

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

PT-2026-88051

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

CVE-2026-70583: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally...

CVE-2026-69418: Heap-based Buffer Overflow

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network...

CVE-2026-77892: Protection Mechanism Failure

No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack...

CVE-2026-83977: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69727: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network...

CVE-2026-69785: Untrusted Search Path

Untrusted search path in Windows Smart Card allows an authorized attacker to elevate privileges locally...

CVE-2026-69805: External Control of File Name or Path

External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69440: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-77899: Use After Free

Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally...

CVE-2026-69689: Out-of-bounds Read

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network...

CVE-2026-69816: Use After Free

Use after free in Windows Accounts Control allows an authorized attacker to elevate privileges locally...

CVE-2026-72926: Use After Free

Use after free in Windows Internet Connection Sharing ICS allows an authorized attacker to elevate privileges locally...

PT-2026-87351

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A use-after-free condition in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory...

PT-2026-87381

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow occurs in Windows NTFS, which is a common file system used for organizing and storing files on hard disk drives. This issue allows an authorized attacker to...

CVE-2026-69687: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-69459: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Power Dependency Coordinator allows an authorized attacker to elevate privileges locally...

CVE-2026-69489: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...