CVE-2026-83873: Relative Path Traversal

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-83509: Untrusted Search Path

Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

CVE-2026-70051: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows SmartScreen allows an authorized attacker to elevate privileges locally...

CVE-2026-110237: Unverified Ownership

Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user. Attackers can pre-create a world-writable vifm-ipc-vifm FIFO and write IPC packets with -c and ! shell commands tha...

CVE-2026-83584: Use After Free

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally...

CVE-2026-73027: External Control of System or Configuration Setting

External control of system or configuration setting in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

CVE-2026-108945: Improper Control of Generation of Code

A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kptshape results...

CVE-2026-18343: Improper Privilege Management

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization...

CVE-2026-109526: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been found in HBAI-Ltd Toonflow-app up to 1.1.8. This affects an unknown function of the component exportData Endpoint. Such manipulation leads to information disclosure. An attack has to be approached locally. The exploit has been disclosed to the public and may be used...

PT-2026-112678

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free issue in the Advanced Local Procedure Call ALPC mechanism allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption flaw that occurs...

CVE-2026-108398: Untrusted Search Path

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally...

CVE-2026-102232: Incorrect Authorization

Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-102231: Improper Resolution of Path Equivalence

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-108468: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-79715: Improper Limitation of a Pathname to a Restricted Directory

IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use a specially crafted application archive to write files outside the intended directory...

PT-2026-111974

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...

Microsoft Windows: CVE-2026-70292: Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

PT-2026-112325

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally. Recommendations At the moment, there is no information about a newer version that...

PT-2026-112336

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A null pointer dereference in Windows Hyper-V allows an authorized attacker to cause a local denial of service. A null pointer dereference occurs when a program attempts to read from ...

Microsoft Windows: CVE-2026-70280: Windows Hello Security Feature Bypass Vulnerability

Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally...