PT-2026-88226

In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible unauthorized URI permission grant due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88144

Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

PT-2026-87497

Use after free in Windows Devices Human Interface allows an authorized attacker to elevate privileges locally...

PT-2026-87676

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

PT-2026-87403

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...

PT-2026-87339

Double free in Remote Desktop Gateway Service allows an authorized attacker to elevate privileges locally...

PT-2026-87637

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

PT-2026-87767

Untrusted pointer dereference in Windows ALPC allows an authorized attacker to elevate privileges locally...

PT-2026-87805

Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

PT-2026-87687

Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally...

PT-2026-87717

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

PT-2026-87638

Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network...

PT-2026-88209

In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88295

In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88224

🚨 HIGH severity CVE-2026-28655 CVSS 7.8 Android RemoteViews.java logic error enables background activity launch bypass → local privilege escalation. No user interaction required. Affected: Android OS Patch immediately. CVE Vulnerability PatchNow https://t.co/w436UcWTfE...

PT-2026-88124

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...

PT-2026-88118

🚨 CVE-2026-83970 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-88129

🚨 CVE-2026-83981 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-88125

🚨 CVE-2026-83977 Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally. 🎖@cveNotify...

PT-2026-88122

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...