PT-2026-112602

Name of the Vulnerable Software and Affected Versions Windows Event Tracing affected versions not specified Description A heap-based buffer overflow occurs in Windows Event Tracing, which is a mechanism for logging system events. This flaw allows an unauthorized attacker to execute arbitrary code...

PT-2026-112666

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description An issue in Windows Shell allows an authorized attacker to locally disclose sensitive system information to an unauthorized control sphere. Recommendations At the moment, there is no...

Microsoft Windows: CVE-2026-83588: Windows USB Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally...

Microsoft .NET: CVE-2026-70165: .NET Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

Microsoft .NET: CVE-2026-70190: .NET Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

Microsoft Visual Studio: CVE-2026-96231: .NET Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-113042

Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31...

PT-2026-113045

Name of the Vulnerable Software and Affected Versions Microsoft.NETCore.App.Runtime.linux-arm versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-arm64 versions 8.0.0 through 8.0.31 Microsoft.NETCore.App.Runtime.linux-musl-arm versions 8.0.0 through 8.0.31...

Microsoft .NET: CVE-2026-70161: .NET Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-113150

Name of the Vulnerable Software and Affected Versions Windows Client Side Caching driver csc.sys affected versions not specified Description An issue in the Windows Client Side Caching driver csc.sys allows an authorized attacker to locally disclose sensitive information. Recommendations At the...

PT-2026-112266

Improper limitation of a pathname to a restricted directory 'path traversal' in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-112270

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-103845: Uncontrolled Search Path Element

Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...

PT-2026-112569

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A race condition occurs when concurrent execution using a shared resource lacks proper synchronization. This allows an authorized attacker to elevate privileges locally on the syste...

Microsoft Windows: CVE-2026-83864: Windows NTFS Information Disclosure Vulnerability

Improper access control in Windows NTFS allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96854: Windows Device Association Service Information Disclosure Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...

PT-2026-112725

Name of the Vulnerable Software and Affected Versions Windows Device Association Service affected versions not specified Description An out-of-bounds read in the Windows Device Association Service allows an authorized attacker to disclose information locally. An out-of-bounds read occurs when a...

Microsoft Windows: CVE-2026-83499: Windows Server Update Service Elevation of Privilege Vulnerability

Insufficient granularity of access control in Windows Server Update Service allows an authorized attacker to elevate privileges locally...

PT-2026-111999

Out-of-bounds read in Microsoft Defender allows an authorized attacker to disclose information locally...

CVE-2026-107917: Improper Input Validation

Insufficient input validation vulnerability in the PPPoE Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router. This issue was identified through testing in a controlled research environment using a...