CVE-2026-83763: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Input System allows an authorized attacker to elevate privileges locally...

CVE-2026-87708: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2026-112407

Name of the Vulnerable Software and Affected Versions Windows Setup Files Cleanup affected versions not specified Description A time-of-check time-of-use toctou race condition exists in Windows Setup Files Cleanup. This occurs when a program checks the state of a resource before using it, but the...

Microsoft Windows: CVE-2026-87709: Windows Host Guardian Service Tampering Vulnerability

Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally...

CVE-2026-83507: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...

CVE-2026-70233: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

PT-2026-112761

Name of the Vulnerable Software and Affected Versions Windows Sysmain Service affected versions not specified Description Exposure of sensitive system information to an unauthorized control sphere in the Windows Sysmain Service allows an authorized attacker to disclose information locally...

CVE-2026-83861: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally...

PT-2026-113238

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A use-after-free condition exists in the Windows Broadcast DVR User Service. This allows an authorized attacker to elevate privileges locally on the system...

CVE-2026-69909: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83714: HTTP.sys Information Disclosure Vulnerability

Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally...

CVE-2026-85846: Use After Free

Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally...

PT-2026-111884

Name of the Vulnerable Software and Affected Versions Azure CycleCloud affected versions not specified Description Improper neutralization of special elements used in an OS command leads to an OS command injection. This allows an authorized attacker to execute code locally on the system...

CVE-2026-70106: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-83756: Use After Free

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

CVE-2026-83733: Out-of-bounds Read

Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally...

CVE-2026-97808: Use After Free

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

CVE-2026-97787: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to elevate privileges locally...

PT-2026-112442

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS Deduplication Service affected versions not specified Description Weak authentication in the Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locall...

PT-2026-112702

Name of the Vulnerable Software and Affected Versions Windows Telephony Server affected versions not specified Description A use after free issue in Windows Telephony Server allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...