PT-2026-113146

Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83898: HID Parser Library Information Disclosure Vulnerability

Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-83883: Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83783: Windows Management Instrumentation Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-78459: Microsoft Internet Information Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally...

PT-2026-113132

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

PT-2026-111939

Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-85366: Windows Installer Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-108941: Improper Control of Generation of Code

A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parsecfgargs of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfgargs leads to code injection. The attack can only be performed from a local...

PT-2026-112900

Name of the Vulnerable Software and Affected Versions Windows BitLocker affected versions not specified Description An out-of-bounds read occurs in Windows BitLocker, which allows an authorized attacker to elevate privileges locally and affect the system. An out-of-bounds read is a condition wher...

PT-2026-112727

Name of the Vulnerable Software and Affected Versions Microsoft Graphics Component affected versions not specified Description An out-of-bounds read in the Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. An out-of-bounds read occurs when the software read...

Microsoft Windows: CVE-2026-83749: Windows Overlay Filter Elevation of Privilege Vulnerability

Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

CVE-2026-70222: Relative Path Traversal

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

PT-2026-111921

Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description A use-after-free condition in the Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

PT-2026-112110

Name of the Vulnerable Software and Affected Versions Windows Spaceport.sys affected versions not specified Description An integer overflow or wraparound occurs in the Spaceport.sys driver, which allows an authorized attacker to elevate privileges locally on the system. Recommendations At the...

Microsoft Windows: CVE-2026-69942: Windows Overlay Filter Remote Code Execution Vulnerability

Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally...

PT-2026-112683

Name of the Vulnerable Software and Affected Versions Windows Direct Composition affected versions not specified Description A use after free issue in Windows Direct Composition allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs whe...

Microsoft Windows: CVE-2026-85338: Microsoft Graphics Component Elevation of Privilege Vulnerability

Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2026-108462: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally...

PT-2026-112718

Name of the Vulnerable Software and Affected Versions Windows Print Spooler Components affected versions not specified Description A heap-based buffer overflow exists within the Windows Print Spooler Components. This flaw allows an authorized attacker to elevate their privileges locally on the...