PT-2026-112640

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when the software reads data past the end of the...

PT-2026-113225

Improper access control in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

PT-2026-112266

Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-112711

Name of the Vulnerable Software and Affected Versions Servicing Stack Updates affected versions not specified Description A heap-based buffer overflow exists in Servicing Stack Updates. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs whe...

PT-2026-112040

Name of the Vulnerable Software and Affected Versions Windows UEFI affected versions not specified Description Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally. This issue specifically affects the UEFI Secure Boot security...

PT-2026-112442

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS Deduplication Service affected versions not specified Description Weak authentication in the Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locall...

PT-2026-112325

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally. Recommendations At the moment, there is no information about a newer version that...

PT-2026-112630

Name of the Vulnerable Software and Affected Versions Windows Internet wininet.dll affected versions not specified Description A relative path traversal issue exists in the Windows Internet component wininet.dll. This flaw allows an authorized attacker to perform local tampering. Recommendations ...

PT-2026-112713

Name of the Vulnerable Software and Affected Versions Windows Print Spooler Components affected versions not specified Description An authorized attacker can locally disclose information due to the use of an uninitialized resource within the Windows Print Spooler Components. Recommendations At th...

PT-2026-112735

Name of the Vulnerable Software and Affected Versions Windows Error Reporting affected versions not specified Description A use after free issue exists in Windows Error Reporting. This allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that...

PT-2026-112700

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description Incorrect authorization in the Windows SMB Client allows an authorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information about a...

PT-2026-113028

External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally...

PT-2026-112683

Name of the Vulnerable Software and Affected Versions Windows Direct Composition affected versions not specified Description A use after free issue in Windows Direct Composition allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs whe...

PT-2026-112239

Name of the Vulnerable Software and Affected Versions Microsoft HID Parser Library affected versions not specified Description An out-of-bounds read in the HID Parser Library allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when the software reads data...

PT-2026-112648

Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description Inadequate encryption strength in the Virtualization-Based Security VBS Enclave allows an authorized attacker to perform local spoofing. VBS Enclave ...

PT-2026-113132

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

PT-2026-112632

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A heap-based buffer overflow exists in Windows Push Notifications. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occu...

PT-2026-112629

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description Improper access control in Windows NTFS allows an authorized attacker to disclose information locally. Recommendations At the moment, there is no information about a newer version that...

PT-2026-112719

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description Weak authentication in the Windows Projected File System allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no...

PT-2026-113138

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...