CVE-2026-83798: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally...

Microsoft Windows: CVE-2026-70160: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-111899

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An authorized attacker can locally disclose sensitive information due to the use of an uninitialized resource within the Windows Kernel. This issue allows attackers to obtain sensitive...

PT-2026-111898

Name of the Vulnerable Software and Affected Versions Windows Network File System affected versions not specified Description An untrusted pointer dereference in the Windows Network File System allows an authorized attacker to disclose sensitive information locally. Recommendations At the moment,...

PT-2026-111892

Name of the Vulnerable Software and Affected Versions Windows Group Policy affected versions not specified Description Improper privilege management allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is no...

PT-2026-112805

Name of the Vulnerable Software and Affected Versions Windows Image Acquisition affected versions not specified Description The use of an externally-controlled format string allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no...

PT-2026-113028

External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally...

PT-2026-112977

Name of the Vulnerable Software and Affected Versions Windows Bind Filter Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Bind Filter Driver. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based...

Microsoft Windows: CVE-2026-96858: Windows Security Account Manager Tampering Vulnerability

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-85376: Windows Print Spooler Components Elevation of Privilege Vulnerability

Weak authentication in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83732: Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83736: Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-112837

Name of the Vulnerable Software and Affected Versions Windows 11 Version 24H2 Windows 11 Version 25H2 Windows 11 version 26H1 Windows 11 Version 26H2 Description Missing authentication for a critical function in the Windows Health and Optimized Experiences Service allows an authorized attacker to...

CVE-2026-85884: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85884: Windows Health and Optimized Experiences Service Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to elevate privileges locally...

PT-2026-112352

Improper link resolution before file access 'link following' in Microsoft Defender allows an authorized attacker to disclose information locally...

CVE-2026-70247: Out-of-bounds Read

Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to execute code locally...

PT-2026-112536

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An out-of-bounds read in Windows NTFS allows an authorized attacker to disclose sensitive information locally, which can affect the system. Recommendations At the moment, there is no...

CVE-2026-70149: Heap-based Buffer Overflow

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83584: Windows Smart Card Elevation of Privilege Vulnerability

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally...