Microsoft Windows: CVE-2026-83761: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83765: Windows DWM Core Library Information Disclosure Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83785: Windows COM+ Event System Service Elevation of Privilege Vulnerability

Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83901: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83922: Windows Direct Composition Elevation of Privilege Vulnerability

Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally...

PT-2026-112467

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description Weak authentication in Windows Modern Device Management MDM allows an authorized attacker to perform local tampering, which can affect the system. Recommendations...

PT-2026-112212

Name of the Vulnerable Software and Affected Versions Microsoft PostScript Printer Driver affected versions not specified Description A heap-based buffer overflow occurs in the driver, which allows an unauthorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

CVE-2026-109520: Privilege Defined With Unsafe Actions

A flaw has been found in Colorful iGameCenter 2.0.0.82. Affected by this vulnerability is the function MmMapIoSpace in the library AMDRyzenMasterDriver.sys of the component Dispatch Handler. This manipulation of the argument SystemBuffer causes privilege defined with unsafe actions. The attack...

CVE-2026-102227: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to execute code locally...

CVE-2026-110237: Unverified Ownership

Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user. Attackers can pre-create a world-writable vifm-ipc-vifm FIFO and write IPC packets with -c and ! shell commands tha...

CVE-2026-102233: Missing Authorization

Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-102231: Improper Resolution of Path Equivalence

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-108468: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-105725: Use After Free

Use after free in Windows Security App allows an authorized attacker to elevate privileges locally...

CVE-2026-105722: Use After Free

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-105726: Out-of-bounds Read

Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally...

PT-2026-112160

Name of the Vulnerable Software and Affected Versions Windows IP Over USB Service affected versions not specified Description An out-of-bounds read in the Windows IP Over USB Service allows an authorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds re...

PT-2026-112179

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Resilient File System ReFS, which allows an authorized attacker to elevate privileges locally. A heap-based buffe...

PT-2026-112440

Name of the Vulnerable Software and Affected Versions Windows Smart Card affected versions not specified Description A use-after-free condition in Windows Smart Card allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...

PT-2026-112641

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A use after free condition in Windows Shell allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption issue that occurs when an application...