CVE-2026-69332: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-69458: Out-of-bounds Read

Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges over a network...

CVE-2026-68847: Use After Free

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-69357: Use After Free

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network...

CVE-2026-69735: Use After Free

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69610: Buffer Over-read

Buffer over-read in Windows Win32K allows an authorized attacker to elevate privileges locally...

CVE-2026-73002: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69516: Use After Free

Use after free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

PT-2026-87621

w00t! Microsoft Patch Tuesday included my CVE-2026-69619. https://t.co/a5Rwpo3N0d infosec https://t.co/wVdqMCmSvR...

CVE-2026-69290: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally...

CVE-2026-69602: Use After Free

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network...

PT-2026-87266

Name of the Vulnerable Software and Affected Versions Windows GDI+ affected versions not specified Description An integer underflow wrap or wraparound occurs in Windows GDI+, which is a graphics API used for rendering 2D and 3D graphics. This issue allows an authorized attacker to elevate...

CVE-2026-72965: Use After Free

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83941: Missing Authorization

Missing authorization in Entra ID allows an authorized attacker to elevate privileges over a network...

CVE-2026-62895: Permissive Cross-domain Policy with Untrusted Domains

Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69394: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally...

KLA91272 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, read local files, spoof user interface. Below is a complete...

KLA91267 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Dynamics 365...

CVE-2026-69277: Stack-based Buffer Overflow

Stack-based buffer overflow in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

CVE-2026-68840: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Driver allows an authorized attacker to elevate privileges locally...