CVE-2026-69850: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally...

CVE-2026-70225: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-83514: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69953: Buffer Over-read

Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96948: Windows Client Side Caching driver (csc.sys) Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...

PT-2026-113211

Time-of-check time-of-use toctou race condition in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally...

PT-2026-113232

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally...

PT-2026-112908

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use-after-free condition occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue where an...

CVE-2026-85914: Use After Free

Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85914: Windows Embedded Mode Service Elevation of Privilege Vulnerability

Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...

CVE-2026-103555: Heap-based Buffer Overflow

Heap-based buffer overflow in Virtual Hard Disk VHD Miniport Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-85358: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-95943: Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability

Double free in Connected Devices Platform Service Cdpsvc allows an authorized attacker to elevate privileges locally...

PT-2026-111907

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A use-after-free condition in the Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

Microsoft Windows: CVE-2026-70048: Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Resilient File System ReFS allows an authorized attacker to elevate privileges locally...

CVE-2026-88110: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-83925: Use of Uninitialized Resource

Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96853: Windows Win32 Kernel Subsystem Information Disclosure Vulnerability

Time-of-check time-of-use toctou race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally...

CVE-2026-84020: Use After Free

Use after free in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

CVE-2026-70057: Incorrect Authorization

Incorrect authorization in Windows Routing and Remote Access Service RRAS allows an authorized attacker to bypass a security feature locally...