CVE-2026-88082: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

CVE-2026-96930: Out-of-bounds Read

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70288: Win32k Information Disclosure Vulnerability

Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-87700: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-88071: Double Free

Double free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2026-70113: Integer Overflow or Wraparound

Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69926: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-70056: Use After Free

Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70260: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Microsoft Trace Data Helper allows an authorized attacker to disclose information locally...

CVE-2026-85361: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-83735: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-96911: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-96916: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-102202: Improper Link Resolution Before File Access

Improper access control in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

CVE-2026-102207: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-102191: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-102186: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally...

CVE-2026-100225: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally...

CVE-2026-83714: Use of Uninitialized Resource

Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally...

PT-2026-112555

Name of the Vulnerable Software and Affected Versions Microsoft Bluetooth Driver affected versions not specified Description An out-of-bounds read exists in the Microsoft Bluetooth Driver, which allows an authorized attacker to disclose sensitive information locally and affect the system. An...