CVE-2026-20811

Access of resource using incompatible type 'type confusion' in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...

CVE-2026-20809

Time-of-check time-of-use toctou race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally...

CVE-2026-0404

An insufficient input validation vulnerability in NETGEAR Orbi devices' DHCPv6 functionality allows network adjacent attackers authenticated over WiFi or on LAN to execute OS command injections on the router. DHCPv6 is not enabled by default...

Desktop Window Manager Elevation of Privilege Vulnerability

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally...

Windows WalletService Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows WalletService allows an unauthorized attacker to elevate privileges locally...

Windows Connected Devices Platform Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

Windows Hello Tampering Vulnerability

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally...

Windows Kernel Memory Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Kernel Memory allows an authorized attacker to elevate privileges locally...

Windows Management Services Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...

Windows Management Services Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Management Services allows an authorized attacker to elevate privileges locally...

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

TPM Trustlet Information Disclosure Vulnerability

Out-of-bounds read in Windows TPM allows an authorized attacker to disclose information locally...

Remote Procedure Call Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an unauthorized attacker to disclose information locally...

Astra Linux – Vulnerability in binutils

A security flaw has been discovered in GNU Binutils 2.45. The affected function is the tgtagtype function in the prdbg.c file. Performing certain manipulations results in an unchecked return value from this function. This vulnerability can be exploited locally. The exploit has been released to th...

PT-2026-2725

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A flaw exists within the Windows Win32K component, specifically in the ICOMP area. This issue allows a locally authorized attacker to gain elevated privileges. The issue is an instance of a...

PT-2026-2662

Name of the Vulnerable Software and Affected Versions Windows versions prior to the patchday containing the fix. Description A type confusion issue exists within the Windows Win32K ICOMP component. This allows a locally authorized attacker to gain elevated privileges. The issue involves accessing...

PT-2026-2702

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An issue exists in the Windows Cloud Files Mini Filter Driver where an untrusted pointer dereference can occur. This can allow a locally authorized attacker to gain elevated privileges. The...

PT-2026-2691

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A flaw exists in the Desktop Window Manager DWM component of Windows that could allow a local attacker to gain elevated privileges. The issue involves a use-after-free condition...

PT-2026-2672

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description A flaw exists in the Microsoft Graphics Component that could allow a local attacker to gain elevated privileges. The issue is a use-after-free condition. Recommendations ...

PT-2026-2710

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A use-after-free condition exists in Windows Management Services that could allow a locally authenticated attacker to gain elevated privileges. The issue involves improper...