CVE-2026-103567: Buffer Over-read

Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...

CVE-2026-83728: Improper Validation of Syntactic Correctness of Input

Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally...

CVE-2026-83765: Out-of-bounds Read

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...

CVE-2026-83764: Incorrect Authorization

Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally...

CVE-2026-83737: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-85852: Out-of-bounds Read

Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally...

CVE-2026-87694: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-70140: Use After Free

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

CVE-2026-96843: Heap-based Buffer Overflow

Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally...

CVE-2026-83707: Use After Free

Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...

PT-2026-112868

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description Improper access control in the Windows Broadcast DVR User Service allows an authorized attacker to disclose sensitive information locally, which can affect the...

CVE-2026-88135: Missing Authorization

Improper access control in WebDAV allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87712: Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability

Use after free in Windows Quality of Service QoS Packet Scheduler allows an authorized attacker to elevate privileges locally...

CVE-2026-85830: Out-of-bounds Read

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally...

CVE-2026-108941: Improper Control of Generation of Code

A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parsecfgargs of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfgargs leads to code injection. The attack can only be performed from a local...

CVE-2026-70211: Out-of-bounds Read

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-83720: Use After Free

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

CVE-2026-83636: NULL Pointer Dereference

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...

CVE-2026-70295: Out-of-bounds Read

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-97793: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...