CVE-2026-83567: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-111902

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

Microsoft Windows: CVE-2026-83712: Windows NTFS Remote Code Execution Vulnerability

Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally...

CVE-2026-83712: Out-of-bounds Write

Out-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally...

CVE-2026-96217: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally...

CVE-2026-96867: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally...

CVE-2026-84013: Use After Free

Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85367: Windows Cash Drawer Protocol Provider Elevation of Privilege Vulnerability

Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally...

PT-2026-112868

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description Improper access control in the Windows Broadcast DVR User Service allows an authorized attacker to disclose sensitive information locally, which can affect the...

CVE-2026-105009: Incorrect Default Permissions

Incorrect default permissions in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83691: Windows DHCP Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

CVE-2026-83760: Out-of-bounds Read

Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally...

CVE-2026-83715: Missing Authentication for Critical Function

Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally...

CVE-2026-70011: Out-of-bounds Read

Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally...

CVE-2026-110237: Unverified Ownership

Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user. Attackers can pre-create a world-writable vifm-ipc-vifm FIFO and write IPC packets with -c and ! shell commands tha...

PT-2026-111388

A vulnerability has been identified in SIMATIC IPC BX-21A All versions V31.01.13, SIMATIC IPC RW-543A All versions V1.1.4, SIMATIC IPC227G / IPC277G / IPC277G PRO / IPC327G / IPC377G All versions V28.01.15. A BIOS vendor test key is present in the UEFI Secure Boot key database. This could allow a...

CVE-2026-83793: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

CVE-2026-96225: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-96231

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70248: Windows Hyper-V Denial of Service Vulnerability

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...