PT-2026-113453

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally...

Microsoft Office: CVE-2026-70220: Microsoft Office Word Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally...

Microsoft Office: CVE-2026-96995: Microsoft Office Word Elevation of Privilege Vulnerability

Stack-based buffer overflow in Microsoft Office Word allows an authorized attacker to elevate privileges locally...

Microsoft SQL Server: CVE-2026-85876: Microsoft SQL Server Elevation of Privilege Vulnerability

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-62687: Windows Backup Engine Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-69919: Windows Cryptographic Services Information Disclosure Vulnerability

Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-69945: Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally...

PT-2026-112404

Name of the Vulnerable Software and Affected Versions Windows Server Update Service affected versions not specified Description Insufficient granularity of access control allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no...

PT-2026-112464

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description Missing authentication for a critical function in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally. Recommendation...

PT-2026-112486

Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally...

PT-2026-112643

Name of the Vulnerable Software and Affected Versions Windows Overlay Filter affected versions not specified Description A race condition exists in the Windows Overlay Filter, where concurrent execution using a shared resource occurs without proper synchronization. This flaw allows an authorized...

PT-2026-112672

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

PT-2026-112711

Name of the Vulnerable Software and Affected Versions Servicing Stack Updates affected versions not specified Description A heap-based buffer overflow exists in Servicing Stack Updates. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs whe...

PT-2026-112730

Name of the Vulnerable Software and Affected Versions Windows USB Video Driver affected versions not specified Description A heap-based buffer overflow exists in the Windows USB Video Driver. This flaw allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occur...

PT-2026-112731

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description A use after free issue in the Windows Device Association Service allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption...

Microsoft Windows: CVE-2026-69969: Windows AppX Deployment Service Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Windows AppX Deployment Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70054: Windows NetBIOS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows NetBIOS allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70077: Windows Kernel Information Disclosure Vulnerability

Use after free in Windows Kernel allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70084: Windows Projected File System Information Disclosure Vulnerability

Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70097: Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to perform spoofing locally...