CVE-2026-83702: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-83508: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-97811: Double Free

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...

CVE-2026-85320: Use of Uninitialized Resource

Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally...

CVE-2026-83668: Out-of-bounds Read

Out-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally...

CVE-2026-70580: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally...

CVE-2026-85374: Out-of-bounds Read

Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally...

PT-2026-111922

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A use after free issue exists in Windows Hyper-V, which allows an authorized attacker to execute code locally. Additionally, remote attackers may be able to execute arbitrary code and...

CVE-2026-85796: Numeric Truncation Error

Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83852: Windows Bind Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70274: Windows Bind Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96302: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2026-112683

Name of the Vulnerable Software and Affected Versions Windows Direct Composition affected versions not specified Description A use after free issue in Windows Direct Composition allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs whe...

PT-2026-113452

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description An integer overflow or wraparound occurs, allowing an authorized attacker to elevate privileges locally and affect the system. An integer overflow is a condition where an arithmetic...

Microsoft Windows: CVE-2026-88127: Windows SMB Server Elevation of Privilege Vulnerability

Use after free in Windows SMB Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70299: Windows Bind Filter Driver Elevation of Privilege Vulnerability

Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-70085: Missing Authorization

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

PT-2026-112606

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally, which can lead to an elevation-of-privilege impact on the system...

PT-2026-112611

Name of the Vulnerable Software and Affected Versions Windows Internet wininet.dll affected versions not specified Description Improper privilege management in the Windows Internet component allows an authorized attacker to perform local spoofing, which can be used to affect the system...

PT-2026-112558

Name of the Vulnerable Software and Affected Versions Windows Input System affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to elevate privileges locally on the system...