CVE-2026-69335: Use After Free

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

PT-2026-87326

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69280: Use After Free

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-80159: Untrusted Search Path

Acrobat Reader is affected by an Untrusted Search Path vulnerability that could result in privilege escalation. An attacker with high privileges could leverage this vulnerability to gain elevated access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue...

CVE-2026-81192: Untrusted Search Path

OpenTelemetry.Resources.Host NuGet package, which provides OpenTelemetry resource detectors for host, is affected by an untrusted search path vulnerability on macOS. Prior to version 1.16.0-beta.2, the host.id resource attribute detector launches the sh and ioreg executables by bare name rather...

CVE-2026-67381: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-69528: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-69612: Absolute Path Traversal

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69312: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-87806

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

PT-2026-87969

No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack...

PT-2026-87275

Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges over a network...

PT-2026-87417

🚨 CVE-2026-69379: TOCTOU in ReFsDedupSvc Enables Arbitrary File Overwrite as SYSTEM + Video -Prediction: 📈 3 Positive | 📉 2 Negative https://t.co/rowJAcSEeL Educational Purposes!...

PT-2026-87546

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-87553

Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

PT-2026-88151

“Pace the frontier”... China didn’t. This week’s AI talk: slow the labs so nobody “loses” the race. Amodei asked to pace. Trump said that helps China. Beijing called the slowdown malicious competition. Same week, two PRC-linked groups were already past the talk. The short version They phished NGO...

PT-2026-87658

Integer underflow wrap or wraparound in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...

PT-2026-87285

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

PT-2026-87458

Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network...

PT-2026-88226

In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...