Microsoft Windows: CVE-2026-85369: Windows Hyper-V Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85930: Windows Image Acquisition Elevation of Privilege Vulnerability

Use after free in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87715: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88072: Windows Host Guardian Service Elevation of Privilege Vulnerability

Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88124: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96313: Windows Push Notifications Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96316: Windows Routing and Remote Access Service (RRAS) Tampering Vulnerability

Improper access control in Windows Routing and Remote Access Service RRAS allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-96317: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96852: Windows TCP/IP Elevation of Privilege Vulnerability

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96862: Windows Spaceport.sys Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96865: Windows Secure Kernel Mode Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally...

PT-2026-112640

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when the software reads data past the end of the...

Microsoft Windows: CVE-2026-49785: UEFI Secure Boot Security Feature Bypass Vulnerability

Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-69387: Windows Error Reporting Elevation of Privilege Vulnerability

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69856: Windows Storage Elevation of Privilege Vulnerability

Use after free in Windows Storage allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69915: Windows NTFS Elevation of Privilege Vulnerability

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69923: Windows AI Elevation of Privilege Vulnerability

Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally...

PT-2026-112218

Name of the Vulnerable Software and Affected Versions Windows Spaceport.sys affected versions not specified Description A use-after-free condition in the Spaceport.sys driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when ...

PT-2026-112442

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS Deduplication Service affected versions not specified Description Weak authentication in the Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locall...

Microsoft Windows: CVE-2026-70148: Windows Broadcast DVR User Service Information Disclosure Vulnerability

Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...