PT-2026-112512

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent memory...

PT-2026-113482

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description A privilege elevation issue exists in the Installer component on Windows. This flaw allows a local attacker to use a local program to obtain sensitive information. Recommendations Updat...

CVE-2026-85366: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-87693: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-87700: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-85361: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2026-112754

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description An out-of-bounds read exists in Windows Installer, which allows an authorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds read occurs...

CVE-2026-96305: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-96308: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85941: Windows Installer Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-83752: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-83708: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-69635: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack...

CVE-2026-87704: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-87694: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-109358

Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable 0666. Local unprivileged users on the node can modify the containerd config, for example overwriting the runc location, to escalate...

CVE-2026-109358 Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalation

Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable 0666. Local unprivileged users on the node can modify the containerd config, for example overwriting the runc location, to escalate...

EUVD-2026-97660

Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable 0666. Local unprivileged users on the node can modify the containerd config, for example overwriting the runc location, to escalate...

CVE-2026-109358: Incorrect Permission Assignment for Critical Resource

Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable 0666. Local unprivileged users on the node can modify the containerd config, for example overwriting the runc location, to escalate...

lowkey

Agentes de Codificación de IA Auto-Alojados en AWS — OpenClaw, Claude Code, Codex, Kiro, NemoClaw, Hermes ▶️ Mira el tutorial completo en YouTube 📝 Lee el artículo del blog: "Le di a mi agente su propia cuenta de AWS" TL;DR — despliega Lowkey: curl -sfL install.lowkey.run | bash Funciona en bash ,...