PT-2026-70774

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A heap-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issu...

PT-2026-70773

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A stack-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow is a condition where a...

PT-2026-70444

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally, which enables them to affect the system. Recommendations At the moment, the...

PT-2026-70669

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A heap-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issu...

CVE-2026-70344: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-62768: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-59127: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-33921: Initialization of a Resource with an Insecure Default

The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver was accessible to every local user of the host instead of being restricted to administrators only. A local user without administrative privileges could use the Npcap driver to...

CVE-2026-61925: Incorrect Authorization

Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-61938: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-65774: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2026-70455

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use-after-free condition occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue where an...

PT-2026-70407

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description An integer overflow or wraparound occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there ...

CVE-2026-73250: Improper Neutralization of Special Elements used in a Command

Notepad++ is a free and open-source source code editor. Prior to 8.9.7, the Notepad++ Windows 11 x64 and ARM64 installer passes the attacker-influenced installation directory $INSTDIR from PowerEditor/installer/nppSetup.nsi into a PowerShell -Command string used by RegisterMSIX to invoke...

CVE-2026-70346: Stack-based Buffer Overflow

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-70345: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-70347: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

KLA91202 PE vulnerability in Microsoft Apps

Privilege escalation vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2026-68821 Exploitation Related products App-Installer CVE list CVE-2026-68821 critical KB list Solution Install necessary updates from the KB...

CVE-2026-18412 The OpenCart v4.2.0.0 extension installer contains a directory traversal vulnerability

OpenCart extensions are uploaded as zip files with .ocmod.zip extensions. Upon installation, the OpenCart v4.2.0.0 extension installer extracts these zip files, but does not validate that the extracted paths stay inside the intended extraction directory. An attacker can craft a malicious extensio...

EUVD-2026-55652

OpenCart extensions are uploaded as zip files with .ocmod.zip extensions. Upon installation, the OpenCart v4.2.0.0 extension installer extracts these zip files, but does not validate that the extracted paths stay inside the intended extraction directory. An attacker can craft a malicious extensio...