Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally...

PT-2026-58170

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use-after-free condition in the Windows Kernel allows an unauthorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment,...

PT-2026-58600

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An integer overflow or wraparound occurs in the Windows NTFS file system, which allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment,...

PT-2026-58645

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An integer overflow or wraparound occurs in the tcpip.sys driver, which allows an authorized attacker to elevate privileges locally and affect the system. An integer overflow is a...

PT-2026-58126

Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A race condition exists in Windows Push Notifications, where concurrent execution using a shared resource with improper synchronization allows an authorized attacker to...

PT-2026-58649

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A use-after-free condition in the Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

PT-2026-58601

Name of the Vulnerable Software and Affected Versions Windows 11 affected versions not specified Description A use after free issue in the Windows MIDI Service Module allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

PT-2026-58312

Name of the Vulnerable Software and Affected Versions Windows Image Acquisition affected versions not specified Description A null pointer dereference in Windows Image Acquisition allows an authorized attacker to elevate privileges locally. A null pointer dereference occurs when a program attempt...

PT-2026-58203

Name of the Vulnerable Software and Affected Versions Windows Server Backup affected versions not specified Description An improper link resolution issue before file access, known as link following, allows an authorized attacker to elevate privileges locally. This flaw enables a low-privilege...

PT-2026-58325

Name of the Vulnerable Software and Affected Versions Windows Operating Systems affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges locally, potentially enabling a full system takeover. Recommendations At the moment, there is no...

PT-2026-58320

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Windows DWM affected versions not specified Description A use-after-free condition in the Windows Kernel and Windows Desktop Window Manager DWM allows an authorized attacker to elevate privileges...

PT-2026-58631

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally. This issue enables attackers to gain...

PT-2026-58669

Name of the Vulnerable Software and Affected Versions Windows Win32K affected versions not specified Description A use-after-free condition in Windows Win32K allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application...

Security Updates for Microsoft SQL Server (July 2026)

The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over...

PT-2026-58150

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A heap-based buffer overflow exists in the Windows DNS Client. This flaw allows an authorized attacker with local access to elevate their privileges to administrative levels. A heap-based...

PT-2026-58172

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An integer overflow or wraparound in the Web Proxy Auto-Discovery Protocol WPAD allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no...

PT-2026-58614

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use-after-free condition in the Windows Kernel allows an authorized attacker to elevate privileges locally, enabling them to affect the system. Use-after-free is a memory corruption...

PT-2026-58135

Name of the Vulnerable Software and Affected Versions Windows App Installer affected versions not specified Description A use-after-free condition exists in Windows App Installer, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that...

PT-2026-58175

Name of the Vulnerable Software and Affected Versions Windows AppX Deployment Service affected versions not specified Description A race condition exists in the Windows AppX Deployment Service. This occurs when concurrent execution using a shared resource lacks proper synchronization, allowing an...

PT-2026-58404

Name of the Vulnerable Software and Affected Versions Windows Internal System User Profile affected versions not specified Description A use after free issue in the Windows Internal System User Profile allows an authorized attacker to elevate privileges locally. Use after free is a memory...