Microsoft Windows: CVE-2026-83758: Windows Error Reporting Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally...

PT-2026-111999

Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70245: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83679: Windows Defender Firewall Service Elevation of Privilege Vulnerability

Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85343: Windows Hyper-V Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

PT-2026-112688

Name of the Vulnerable Software and Affected Versions Windows Registry affected versions not specified Description An authorized attacker can elevate privileges locally due to improper link resolution before file access, a condition known as link following, within the Windows Registry...

Microsoft Windows: CVE-2026-83659: Windows User Profile Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

PT-2026-112732

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description An authorized attacker can achieve local privilege escalation due to improper link resolution before file access, a condition known as link following, within Windows Hyper-V...

PT-2026-112630

Name of the Vulnerable Software and Affected Versions Windows Internet wininet.dll affected versions not specified Description A relative path traversal issue exists in the Windows Internet component wininet.dll. This flaw allows an authorized attacker to perform local tampering. Recommendations ...

Microsoft Windows: CVE-2026-87699: Winlogon Elevation of Privilege Vulnerability

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83584: Windows Smart Card Elevation of Privilege Vulnerability

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83691: Windows DHCP Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

PT-2026-112336

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A null pointer dereference in Windows Hyper-V allows an authorized attacker to cause a local denial of service. A null pointer dereference occurs when a program attempts to read from ...

Microsoft SQL Server: CVE-2026-88088: Microsoft SQL Server Elevation of Privilege Vulnerability

Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally...

PT-2026-112683

Name of the Vulnerable Software and Affected Versions Windows Direct Composition affected versions not specified Description A use after free issue in Windows Direct Composition allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs whe...

PT-2026-112160

Name of the Vulnerable Software and Affected Versions Windows IP Over USB Service affected versions not specified Description An out-of-bounds read in the Windows IP Over USB Service allows an authorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds re...

PT-2026-112713

Name of the Vulnerable Software and Affected Versions Windows Print Spooler Components affected versions not specified Description An authorized attacker can locally disclose information due to the use of an uninitialized resource within the Windows Print Spooler Components. Recommendations At th...

Microsoft Windows: CVE-2026-83740: Windows Hello Elevation of Privilege Vulnerability

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85355: Windows Common Log File System Driver Elevation of Privilege Vulnerability

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

PT-2026-112736

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description The Windows Common Log File System Driver contains a flaw where functionality from an untrusted control sphere is included, allowing an authorized attacker to...