Microsoft Windows: CVE-2026-85336: Windows Device Association Service Information Disclosure Vulnerability

Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83859: Windows NTFS Elevation of Privilege Vulnerability

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70071: Role: DNS Server Tampering Vulnerability

Improper verification of cryptographic signature in DNS Server allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-83567: Windows NTFS Elevation of Privilege Vulnerability

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70128: HID Parser Library Information Disclosure Vulnerability

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96317: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88139: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69867: SQLite Elevation of Privilege Vulnerability

Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally...

PT-2026-112352

Improper link resolution before file access 'link following' in Microsoft Defender allows an authorized attacker to disclose information locally...

PT-2026-112741

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use after free issue exists in Windows Installer. This allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

PT-2026-113548

Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive...

PT-2026-113226

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83715: Windows Error Reporting Tampering Vulnerability

Missing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-70248: Windows Hyper-V Denial of Service Vulnerability

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...

Microsoft Windows: CVE-2026-85343: Windows Hyper-V Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70085: Role: DNS Server Tampering Vulnerability

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-69974: Desktop Window Manager Information Disclosure Vulnerability

Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85909: Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96858: Windows Security Account Manager Tampering Vulnerability

Missing authentication for critical function in Windows Security Account Manager allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-96302: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...