UBUNTU-CVE-2026-107818

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE privilege and a secure-file-priv...

CVE-2026-102186: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally...

CVE-2026-103554: Use After Free

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

PT-2026-112708

Name of the Vulnerable Software and Affected Versions Windows Advanced Rasterization Platform affected versions not specified Description A use after free issue exists in the Windows Advanced Rasterization Platform. This flaw allows an authorized attacker to elevate privileges locally. Use after...

PT-2026-112224

Name of the Vulnerable Software and Affected Versions Microsoft PostScript Printer Driver affected versions not specified Description A stack-based buffer overflow occurs in the driver, which allows an unauthorized attacker to elevate privileges locally. A stack-based buffer overflow is a conditi...

PT-2026-112040

Name of the Vulnerable Software and Affected Versions Windows UEFI affected versions not specified Description Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally. This issue specifically affects the UEFI Secure Boot security...

PT-2026-112315

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A relative path traversal issue exists in Windows Shell. This flaw allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...

PT-2026-112391

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Security Center allows an authorized attacker to elevate privileges locally...

PT-2026-112630

Name of the Vulnerable Software and Affected Versions Windows Internet wininet.dll affected versions not specified Description A relative path traversal issue exists in the Windows Internet component wininet.dll. This flaw allows an authorized attacker to perform local tampering. Recommendations ...

PT-2026-112666

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description An issue in Windows Shell allows an authorized attacker to locally disclose sensitive system information to an unauthorized control sphere. Recommendations At the moment, there is no...

PT-2026-112663

Name of the Vulnerable Software and Affected Versions Windows Direct Composition affected versions not specified Description A heap-based buffer overflow exists in Windows Direct Composition. This issue allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occu...

PT-2026-112649

Name of the Vulnerable Software and Affected Versions Windows Update Orchestrator Service affected versions not specified Description A use after free issue exists in the Windows Update Orchestrator Service. This flaw allows an authorized attacker to elevate privileges locally. Use after free is ...

PT-2026-112629

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description Improper access control in Windows NTFS allows an authorized attacker to disclose information locally. Recommendations At the moment, there is no information about a newer version that...

PT-2026-112709

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description A use after free issue in the Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally. Use after free...

PT-2026-112741

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use after free issue exists in Windows Installer. This allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

PT-2026-112744

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use after free issue exists in Windows Installer. This allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

PT-2026-112158

Name of the Vulnerable Software and Affected Versions Windows IP Over USB Service affected versions not specified Description An integer overflow or wraparound occurs in the Windows IP Over USB Service. This issue allows an authorized attacker to elevate privileges locally, enabling them to affec...

PT-2026-113452

Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally...

PT-2026-113450

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70216: Windows Mobile Device Management Tampering Vulnerability

Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally...