Microsoft Windows: CVE-2026-70280: Windows Hello Security Feature Bypass Vulnerability

Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-70288: Win32k Information Disclosure Vulnerability

Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-70205: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-108955: Out-of-bounds Read

A vulnerability was determined in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Impacted is the function ggufinitfromfile of the file ggml.c of the component GGUF Parser. This manipulation of the argument dataoffset causes out-of-bounds read. The attack requires local access...

Microsoft Windows: CVE-2026-70185: Microsoft PowerShell Security Feature Bypass Vulnerability

Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-70294: Win32k Information Disclosure Vulnerability

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-105733: Incorrect Initialization of Resource

Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally...

PT-2026-111882

Name of the Vulnerable Software and Affected Versions Windows Update Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Update Service, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

PT-2026-111970

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A heap-based buffer overflow in the HID class driver allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap...

PT-2026-111955

Name of the Vulnerable Software and Affected Versions Windows Partition Management Driver affected versions not specified Description An out-of-bounds read in the Windows Partition Management Driver allows an authorized attacker to elevate privileges locally, which can lead to full system...

PT-2026-111902

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

PT-2026-111918

Name of the Vulnerable Software and Affected Versions Windows Win32 Kernel Subsystem affected versions not specified Description A use-after-free condition in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issu...

PT-2026-111921

Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description A use-after-free condition in the Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

PT-2026-111879

Name of the Vulnerable Software and Affected Versions Windows Update Service affected versions not specified Description A use-after-free condition in the Windows Update Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs wh...

PT-2026-111927

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83676: Windows Installer Elevation of Privilege Vulnerability

Integer underflow wrap or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83717: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88134: Windows Kernel Elevation of Privilege Vulnerability

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-112352

Improper link resolution before file access 'link following' in Microsoft Defender allows an authorized attacker to disclose information locally...

Microsoft .NET: CVE-2026-70165: .NET Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...