PT-2026-87717

Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A use-after-free condition in Windows Hello allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...

CVE-2026-69864: Use After Free

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-72980: Uncontrolled Search Path Element

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...

PT-2026-88056

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-81354: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69784: Use After Free

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

PT-2026-87765

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

PT-2026-87742

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

PT-2026-87670

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69710: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

PT-2026-87891

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...

CVE-2026-69820: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69740: Use After Free

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

PT-2026-87693

Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A use-after-free condition in Windows Hello allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...

PT-2026-87727

Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A race condition occurs in Windows Hello due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally. A race condition...

CVE-2026-69799: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-69725: Double Free

Double free in Windows Hello allows an authorized attacker to elevate privileges locally...

PT-2026-87683

Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A double free issue in Windows Hello allows an authorized attacker to elevate privileges locally. A double free occurs when the system attempts to free the same memory location twice,...

Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers

Google on Thursday announced new network security protections in Android 17 to bolster connection privacy, address cellular vulnerabilities, and safeguard the privacy of users' home networks. Topping the list is support for Encrypted Client Hello ECH, a privacy standard that prevents networks fro...

BIT-MONGODB-2026-13074 Awaitable Hello Command in Exhaust Mode Unthrottled Response Loop Leading to Denial of Service

An unauthenticated remote client can cause excessive CPU consumption on a MongoDB server by sending a specific combination of parameters to the awaitable hello command in exhaust mode. The server's handling of this combination results in a response loop that bypasses normal throttling, allowing a...