PT-2026-111901

Name of the Vulnerable Software and Affected Versions Windows Storage affected versions not specified Description A heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a...

Microsoft Windows: CVE-2026-88074: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Integer overflow or wraparound in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70288: Win32k Information Disclosure Vulnerability

Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

PT-2026-112736

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description The Windows Common Log File System Driver contains a flaw where functionality from an untrusted control sphere is included, allowing an authorized attacker to...

Microsoft Windows: CVE-2026-83915: Windows Diagnostic Policy Service Elevation of Privilege Vulnerability

Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83931: Windows Hyper-V Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...

CVE-2026-110234: Insecure Temporary File

Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives...

Microsoft Windows: CVE-2026-85943: Reliable Multicast Transport Driver (RMCAST) Elevation of Privilege Vulnerability

Time-of-check time-of-use toctou race condition in Reliable Multicast Transport Driver RMCAST allows an authorized attacker to elevate privileges locally...

PT-2026-112256

Name of the Vulnerable Software and Affected Versions Windows Client Side Caching driver csc.sys affected versions not specified Description An issue in the Windows Client Side Caching driver csc.sys allows an authorized attacker to locally disclose sensitive information to an unauthorized actor...

PT-2026-113229

Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally...

PT-2026-111955

Name of the Vulnerable Software and Affected Versions Windows Partition Management Driver affected versions not specified Description An out-of-bounds read in the Windows Partition Management Driver allows an authorized attacker to elevate privileges locally, which can lead to full system...

Microsoft Windows: CVE-2026-96937: Microsoft Windows Search Component Elevation of Privilege Vulnerability

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-100215: Microsoft Graphics Component Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally...

Microsoft Windows: CVE-2026-87711: Windows Installer Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70233: Windows Common Log File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85868: Windows Common Log File System Driver Elevation of Privilege Vulnerability

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-100217: Missing Authorization

Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally...

PT-2026-112212

Name of the Vulnerable Software and Affected Versions Microsoft PostScript Printer Driver affected versions not specified Description A heap-based buffer overflow occurs in the driver, which allows an unauthorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory...

Microsoft Windows: CVE-2026-102211: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Use after free in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87699: Winlogon Elevation of Privilege Vulnerability

Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally...