PT-2026-113131

Integer underflow wrap or wraparound in Windows NTFS allows an authorized attacker to disclose information locally...

PT-2026-112738

Name of the Vulnerable Software and Affected Versions Windows Phone Service affected versions not specified Description A race condition exists in the Windows Phone Service, where concurrent execution using a shared resource occurs without proper synchronization. This flaw allows an authorized...

PT-2026-112450

Name of the Vulnerable Software and Affected Versions Windows Sensor Data Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Sensor Data Service. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based...

PT-2026-112737

Name of the Vulnerable Software and Affected Versions Windows Volume Manager Extension Driver affected versions not specified Description An out-of-bounds read in the Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. An out-of-bounds read occurs...

CVE-2026-110234: Insecure Temporary File

Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives...

CVE-2026-85364: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70132: Windows Portable Device File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-18343: Improper Privilege Management

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization...

CVE-2026-108945: Improper Control of Generation of Code

A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kptshape results...

Microsoft Windows: CVE-2026-69919: Windows Cryptographic Services Information Disclosure Vulnerability

Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-88093: Desktop Window Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

PT-2026-112970

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A race condition occurs in the Microsoft Windows Search Component due to improper synchronization when using a shared resource. This allows an authorized attacker t...

Microsoft Windows: CVE-2026-96856: Windows Management Instrumentation Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-96855: Missing Authorization

Improper access control in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-96854: Windows Device Association Service Information Disclosure Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-88160: Microsoft Windows Search Component Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88181: Windows DWM Core Library Elevation of Privilege Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-84009: Windows Projected File System Tampering Vulnerability

Time-of-check time-of-use toctou race condition in Windows Projected File System allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-96947: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

CVE-2026-110036: Integer Overflow or Wraparound

A flaw was found in device-mapper-persistent-data. A local attacker can cause a Denial of Service DoS by inducing a user or system tool to process crafted device metadata containing an excessively large block index. An arithmetic error in the synchronous block reading logic causes the application...