CVE-2026-70085: Missing Authorization

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

PT-2026-112606

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally, which can lead to an elevation-of-privilege impact on the system...

PT-2026-112611

Name of the Vulnerable Software and Affected Versions Windows Internet wininet.dll affected versions not specified Description Improper privilege management in the Windows Internet component allows an authorized attacker to perform local spoofing, which can be used to affect the system...

PT-2026-112558

Name of the Vulnerable Software and Affected Versions Windows Input System affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to elevate privileges locally on the system...

PT-2026-112601

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description A buffer over-read in the Windows Common Log File System Driver allows an authorized attacker to disclose sensitive information locally and affect the system. A...

PT-2026-112559

Name of the Vulnerable Software and Affected Versions Windows Clipboard User Service affected versions not specified Description Incorrect authorization in the Windows Clipboard User Service allows an authorized attacker to disclose information locally. Recommendations At the moment, there is no...

PT-2026-112469

Name of the Vulnerable Software and Affected Versions Windows User Profile Service affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At t...

PT-2026-112438

Name of the Vulnerable Software and Affected Versions Windows Graphics Kernel affected versions not specified Description A use after free issue in the Windows Graphics Kernel allows an authorized attacker to locally disclose sensitive information, which can impact the system. Recommendations At...

PT-2026-112441

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description The use of an externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information abou...

PT-2026-112490

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description An out-of-bounds read in the Microsoft Windows Search Component allows an authorized attacker to disclose sensitive information locally and affect the system. An...

PT-2026-112499

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description The use of an uninitialized resource in the Windows Event Logging Service allows an authorized attacker to disclose information locally. Recommendations At the moment,...

PT-2026-112493

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A use-after-free condition occurs in Windows Error Reporting, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue...

PT-2026-112443

Name of the Vulnerable Software and Affected Versions Windows Core Messaging affected versions not specified Description An untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendation...

PT-2026-112550

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description Use of an uninitialized resource in Windows Win32K allows an authorized attacker to disclose sensitive information locally, which may affect the system. Recommendations At the moment,...

PT-2026-112531

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description Improper validation of the syntactic correctness of input allows an authorized attacker to perform local spoofing, which can affect the system. Recommendations At the moment, there is...

PT-2026-112542

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description An out-of-bounds read exists in Windows Error Reporting, which allows an authorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds...

PT-2026-112517

Name of the Vulnerable Software and Affected Versions Windows HTTP.sys affected versions not specified Description The use of an uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose sensitive information locally and affect the system. Recommendations At the moment,...

PT-2026-112519

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A heap-based buffer overflow occurs in Windows Hyper-V, which is a memory corruption issue where data exceeds the allocated buffer on the heap. This allows an authorized attacker to...

PT-2026-112481

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description An integer underflow wrap or wraparound occurs, which allows an authorized attacker to elevate privileges locally and affect the system. Integer underflow is a condition where a...

PT-2026-112500

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A use-after-free condition in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...