PT-2026-112632

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A heap-based buffer overflow exists in Windows Push Notifications. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occu...

PT-2026-112629

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description Improper access control in Windows NTFS allows an authorized attacker to disclose information locally. Recommendations At the moment, there is no information about a newer version that...

PT-2026-113138

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...

PT-2026-113133

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

PT-2026-113240

Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally...

PT-2026-112352

Improper link resolution before file access 'link following' in Microsoft Defender allows an authorized attacker to disclose information locally...

PT-2026-112741

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use after free issue exists in Windows Installer. This allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

PT-2026-113548

Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive...

PT-2026-113226

Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally...

PT-2026-113028

External control of system or configuration setting in Microsoft PowerToys allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83587: Windows Core Messaging Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70248: Windows Hyper-V Denial of Service Vulnerability

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...

Microsoft Windows: CVE-2026-83507: Windows Update Orchestrator Service Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83791: Windows Virtual Input Elevation of Privilege Vulnerability

Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85831: Windows Biometric Service Information Disclosure Vulnerability

Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83864: Windows NTFS Information Disclosure Vulnerability

Improper access control in Windows NTFS allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70093: Windows Rich Text Edit Control Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83509: Windows Setup Files Cleanup Elevation of Privilege Vulnerability

Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83887: HID Parser Library Information Disclosure Vulnerability

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-97798: Windows Error Reporting Service Elevation of Privilege Vulnerability

Improper neutralization of argument delimiters in a command 'argument injection' in Windows Error Reporting allows an authorized attacker to elevate privileges locally...