CVE-2026-109453: Heap-based Buffer Overflow

Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-102220: Use After Free

Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally...

CVE-2026-108134: Use After Free

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally...

CVE-2026-108135: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Backup Engine allows an authorized attacker to elevate privileges locally...

CVE-2026-105004: Out-of-bounds Read

Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-108471: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-108136: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

PT-2026-113288

Dimension is affected by an Improper Neutralization of Input During Web Page Generation vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation o...

PT-2026-113287

Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...

Microsoft Windows: CVE-2026-105007: Windows NDIS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...

PT-2026-112024

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An issue in the Windows Kernel allows an authorized attacker to locally disclose sensitive system information to an unauthorized control sphere. Recommendations At the moment, there is...

CVE-2026-100201: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally...

CVE-2026-102194: Use After Free

Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-102196: Use After Free

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-102204: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...

PT-2026-112223

Name of the Vulnerable Software and Affected Versions Microsoft PostScript Printer Driver affected versions not specified Description A heap-based buffer overflow occurs in the driver, which allows an unauthorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

Microsoft Windows: CVE-2026-83499: Windows Server Update Service Elevation of Privilege Vulnerability

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

CVE-2026-102233: Missing Authorization

Missing authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

PT-2026-112633

Name of the Vulnerable Software and Affected Versions Microsoft Bluetooth Driver affected versions not specified Description A race condition exists in the Microsoft Bluetooth Driver. This occurs when concurrent execution using a shared resource lacks proper synchronization, allowing an authorize...

PT-2026-112759

Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Encrypting File System EFS, which is a feature that provides file-level encryption. This flaw allows an authorize...