PT-2026-112040

Name of the Vulnerable Software and Affected Versions Windows UEFI affected versions not specified Description Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally. This issue specifically affects the UEFI Secure Boot security...

PT-2026-112325

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally. Recommendations At the moment, there is no information about a newer version that...

PT-2026-112713

Name of the Vulnerable Software and Affected Versions Windows Print Spooler Components affected versions not specified Description An authorized attacker can locally disclose information due to the use of an uninitialized resource within the Windows Print Spooler Components. Recommendations At th...

PT-2026-112700

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description Incorrect authorization in the Windows SMB Client allows an authorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information about a...

PT-2026-112683

Name of the Vulnerable Software and Affected Versions Windows Direct Composition affected versions not specified Description A use after free issue in Windows Direct Composition allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs whe...

PT-2026-113442

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70211: Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70173: Microsoft Windows Search Component Information Disclosure Vulnerability

Out-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70148: Windows Broadcast DVR User Service Information Disclosure Vulnerability

Improper authorization in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70122: Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70135: Windows Remote POS Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Remote POS Driver allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70093: Windows Rich Text Edit Control Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69915: Windows NTFS Elevation of Privilege Vulnerability

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69914: Windows AppX Deployment Service Information Disclosure Vulnerability

Out-of-bounds read in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-69905: Windows AppX Deployment Service Tampering Vulnerability

Missing authorization in Windows AppX Deployment Service allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-69898: Windows Kernel Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69882: Windows Update Elevation of Privilege Vulnerability

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69880: Desktop Window Manager Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69736: Windows Credential Manager Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Credential Manager allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69733: Windows Update Elevation of Privilege Vulnerability

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...