PT-2026-113134

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-112722

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A use after free issue in the Windows Device Association Service allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption...

PT-2026-113227

Heap-based buffer overflow in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

PT-2026-113226

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...

PT-2026-112429

Name of the Vulnerable Software and Affected Versions Microsoft HID Parser Library affected versions not specified Description A heap-based buffer overflow exists in the HID Parser Library. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs...

PT-2026-112027

Name of the Vulnerable Software and Affected Versions Windows Update Delivery Optimization affected versions not specified Description A use after free issue exists in Windows Update Delivery Optimization. This allows an authorized attacker to elevate privileges locally. Use after free is a memor...

PT-2026-112633

Name of the Vulnerable Software and Affected Versions Microsoft Bluetooth Driver affected versions not specified Description A race condition exists in the Microsoft Bluetooth Driver. This occurs when concurrent execution using a shared resource lacks proper synchronization, allowing an authorize...

PT-2026-112663

Name of the Vulnerable Software and Affected Versions Windows Direct Composition affected versions not specified Description A heap-based buffer overflow exists in Windows Direct Composition. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occu...

PT-2026-112709

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description A use after free issue in the Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally. Use after free...

PT-2026-113228

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description Improper neutralization of argument delimiters in a command, known as argument injection, occurs in Windows Error Reporting. This issue allows an authorized standard user to...

PT-2026-113238

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

Security Vulnerabilities fixed in Firefox ESR 153.5 — Mozilla

Note : We have changed how we publish advisories. We no longer roll all internally identified memory safety vulnerabilities into a single CVE and are now issuing an advisory for every individual bug. CVE-2026-109704: Privilege escalation in the Application Update component Reporter Noel Impact hi...

PT-2026-112649

Name of the Vulnerable Software and Affected Versions Windows Update Orchestrator Service affected versions not specified Description A use after free issue exists in the Windows Update Orchestrator Service. This flaw allows an authorized attacker to elevate privileges locally. Use after free is ...

PT-2026-112682

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A heap-based buffer overflow exists in the Microsoft Windows Search Component. This flaw allows an authorized attacker to elevate privileges locally. A heap-based...

PT-2026-112703

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A heap-based buffer overflow exists in the Windows Device Association Service. This flaw allows an authorized attacker to elevate privileges locally. A heap-based...

PT-2026-113143

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to elevate privileges locally...

PT-2026-113137

Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-112693

Name of the Vulnerable Software and Affected Versions Windows Group Policy affected versions not specified Description A heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more...

PT-2026-112702

Name of the Vulnerable Software and Affected Versions Windows Telephony Server affected versions not specified Description A use after free issue in Windows Telephony Server allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

PT-2026-112711

Name of the Vulnerable Software and Affected Versions Servicing Stack Updates affected versions not specified Description A heap-based buffer overflow exists in Servicing Stack Updates. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs whe...