Microsoft Windows: CVE-2026-70093: Windows Rich Text Edit Control Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally...

CVE-2026-102216: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85355: Windows Common Log File System Driver Elevation of Privilege Vulnerability

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-83764: Incorrect Authorization

Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally...

PT-2026-112744

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use after free issue exists in Windows Installer. This allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

PT-2026-113131

Integer underflow wrap or wraparound in Windows NTFS allows an authorized attacker to disclose information locally...

PT-2026-112738

Name of the Vulnerable Software and Affected Versions Windows Phone Service affected versions not specified Description A race condition exists in the Windows Phone Service, where concurrent execution using a shared resource occurs without proper synchronization. This flaw allows an authorized...

PT-2026-112737

Name of the Vulnerable Software and Affected Versions Windows Volume Manager Extension Driver affected versions not specified Description An out-of-bounds read in the Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. An out-of-bounds read occurs...

Microsoft Windows: CVE-2026-70132: Windows Portable Device File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Portable Device File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-18343: Improper Privilege Management

IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization...

CVE-2026-108945: Improper Control of Generation of Code

A vulnerability was detected in iMoonLab yolov13 up to 73289949533efac82bb5f72ec19b746618656bd2. Affected by this issue is the function eval of the file ultralytics/nn/autobackend.py of the component AutoBackend Model Loading. Performing a manipulation of the argument imgsz/names/kptshape results...

Microsoft Windows: CVE-2026-69919: Windows Cryptographic Services Information Disclosure Vulnerability

Out-of-bounds read in Windows Cryptographic Services allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-88093: Desktop Window Manager Elevation of Privilege Vulnerability

Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally...

PT-2026-112970

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A race condition occurs in the Microsoft Windows Search Component due to improper synchronization when using a shared resource. This allows an authorized attacker t...

Microsoft Windows: CVE-2026-96856: Windows Management Instrumentation Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally...

CVE-2026-96855: Missing Authorization

Improper access control in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...

Microsoft Windows: CVE-2026-96854: Windows Device Association Service Information Disclosure Vulnerability

Access of resource using incompatible type 'type confusion' in Windows Device Association Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-88160: Microsoft Windows Search Component Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88181: Windows DWM Core Library Elevation of Privilege Vulnerability

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-84009: Windows Projected File System Tampering Vulnerability

Time-of-check time-of-use toctou race condition in Windows Projected File System allows an authorized attacker to perform tampering locally...