Microsoft Windows: CVE-2026-83875: Windows Human Interface Device Information Disclosure Vulnerability

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-69867: SQLite Elevation of Privilege Vulnerability

Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally...

PT-2026-112286

Name of the Vulnerable Software and Affected Versions Windows PowerShell affected versions not specified Description A protection mechanism failure allows an authorized attacker to locally bypass a security feature, which can lead to an impact on the system. Recommendations At the moment, there i...

Microsoft Windows: CVE-2026-96223: Windows Hyper-V Elevation of Privilege Vulnerability

Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

PT-2026-112900

Name of the Vulnerable Software and Affected Versions Windows BitLocker affected versions not specified Description An out-of-bounds read occurs in Windows BitLocker, which allows an authorized attacker to elevate privileges locally and affect the system. An out-of-bounds read is a condition wher...

CVE-2026-109526: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component exportData Endpoint. Such manipulation leads to information disclosure. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : p11-kit vulnerabilities (USN-8687-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8687-1 advisory. It was discovered that p11-kit incorrectly handled certain RPC messages. A local attacker could use this issue to cau...

PT-2026-112391

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Security Center allows an authorized attacker to elevate privileges locally...

PT-2026-112648

Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description Inadequate encryption strength in the Virtualization-Based Security VBS Enclave allows an authorized attacker to perform local spoofing. VBS Enclave ...

CVE-2026-105009: Incorrect Default Permissions

Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85866: Windows ALPC Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally...

CVE-2026-102191: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-100225: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-105007: Out-of-bounds Read

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...

PT-2026-111924

Access of resource using incompatible type 'type confusion' in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70063: Windows Kernel Information Disclosure Vulnerability

Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-69974: Desktop Window Manager Information Disclosure Vulnerability

Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-69978: Microsoft Windows VMSwitch Denial of Service Vulnerability

Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally...

Microsoft Windows: CVE-2026-69967: Windows Overlay Filter Information Disclosure Vulnerability

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-69840: Windows Certificates Elevation of Privilege Vulnerability

Use after free in Windows Certificates allows an authorized attacker to elevate privileges locally...