Microsoft Windows: CVE-2026-70113: Windows Client for NFS Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally...

PT-2026-112431

Name of the Vulnerable Software and Affected Versions Windows Audio Service affected versions not specified Description A null pointer dereference in the Windows Audio Service allows an authorized attacker to disclose sensitive information locally and affect the system. A null pointer dereference...

PT-2026-113548

Name of the Vulnerable Software and Affected Versions OpenVPN ovpn-dco-win versions 0.6.5 through 1.3.5 OpenVPN ovpn-dco-win versions 2.4.0 through 2.8.7 Description Improper synchronization in the Windows component allows local attackers to trigger a deadlock by performing a crafted write to the...

CVE-2026-109526: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component exportData Endpoint. Such manipulation leads to information disclosure. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...

PT-2026-113442

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83764: Windows Clipboard User Service Information Disclosure Vulnerability

Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70280: Windows Hello Security Feature Bypass Vulnerability

Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-70288: Win32k Information Disclosure Vulnerability

Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

PT-2026-111902

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

Microsoft Windows: CVE-2026-83676: Windows Installer Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83717: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2026-112352

Improper link resolution before file access 'link following' in Microsoft Defender allows an authorized attacker to disclose information locally...

Microsoft .NET: CVE-2026-70165: .NET Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-105731: Use of Uninitialized Resource

Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally...

CVE-2026-100207: Improper Neutralization of Special Elements used in an OS Command

Improper neutralization of special elements used in an os command 'os command injection' in Azure CycleCloud allows an authorized attacker to execute code locally...

PT-2026-113045

Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31...

CVE-2026-108398: Untrusted Search Path

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally...

CVE-2026-108462: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2026-102207: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-102202: Improper Link Resolution Before File Access

Improper access control in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...