CVE-2026-107918: Improper Input Validation

Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research environment using a...

CVE-2026-0893: Exposure of Sensitive Information Due to Incompatible Policies

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause “Exposure of Sensitive Information to an Unauthorized Actor” by local access. Successful exploitation of this vulnerability can lead to information disclosure, privilege escalation, and further impact on Confidentiality,...

CVE-2026-108465: Use After Free

Use after free in Windows Update Delivery Optimization allows an authorized attacker to elevate privileges locally...

CVE-2026-108464: Use After Free

Use after free in Software Protection Platform SPP allows an authorized attacker to elevate privileges locally...

CVE-2026-108462: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...

CVE-2026-105732: Stack-based Buffer Overflow

Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally...

CVE-2026-105722: Use After Free

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-108398: Untrusted Search Path

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally...

CVE-2026-108461: Use After Free

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-108399: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally...

CVE-2026-105731: Use of Uninitialized Resource

Use of uninitialized resource in Microsoft Graphics Component allows an authorized attacker to disclose information locally...

CVE-2026-105726: Out-of-bounds Read

Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally...

PT-2026-112160

Name of the Vulnerable Software and Affected Versions Windows IP Over USB Service affected versions not specified Description An out-of-bounds read in the Windows IP Over USB Service allows an authorized attacker to disclose sensitive information locally and affect the system. An out-of-bounds re...

PT-2026-112179

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Resilient File System ReFS, which allows an authorized attacker to elevate privileges locally. A heap-based buffe...

PT-2026-112440

Name of the Vulnerable Software and Affected Versions Windows Smart Card affected versions not specified Description A use-after-free condition in Windows Smart Card allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an...

PT-2026-112641

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A use after free condition in Windows Shell allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption issue that occurs when an application...

PT-2026-112681

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A heap-based buffer overflow in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow...

PT-2026-112700

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description Incorrect authorization in the Windows SMB Client allows an authorized attacker to bypass a security feature locally. Recommendations At the moment, there is no information about a...

PT-2026-112707

Name of the Vulnerable Software and Affected Versions Windows Print Spooler Components affected versions not specified Description A use after free issue in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw tha...

PT-2026-112736

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description The Windows Common Log File System Driver contains a flaw where functionality from an untrusted control sphere is included, allowing an authorized attacker to...