PT-2026-112577

Name of the Vulnerable Software and Affected Versions Windows Management Instrumentation affected versions not specified Description A heap-based buffer overflow occurs in Windows Management Instrumentation, which allows an authorized attacker to elevate privileges locally. A heap-based buffer...

CVE-2026-83689: Use After Free

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70093: Windows Rich Text Edit Control Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally...

CVE-2026-102216: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85355: Windows Common Log File System Driver Elevation of Privilege Vulnerability

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-83764: Incorrect Authorization

Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85866: Windows ALPC Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally...

CVE-2026-96938: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to elevate privileges locally...

CVE-2026-107607: Missing Authentication for Critical Function

SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to access a real-time video stream without authentication...

CVE-2026-85833: Use After Free

Use after free in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-83697: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Modern Device Management MDM allows an authorized attacker to perform tampering locally...

CVE-2026-70011: Out-of-bounds Read

Out-of-bounds read in Windows IP Over USB Service allows an authorized attacker to disclose information locally...

PT-2026-113447

Name of the Vulnerable Software and Affected Versions SQL Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than i...

Microsoft Windows: CVE-2026-78459: Microsoft Internet Information Services Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Internet Information Services allows an authorized attacker to elevate privileges locally...

PT-2026-112536

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An out-of-bounds read in Windows NTFS allows an authorized attacker to disclose sensitive information locally, which can affect the system. Recommendations At the moment, there is no...

CVE-2026-97799: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally...

PT-2026-112744

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use after free issue exists in Windows Installer. This allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

PT-2026-113131

Integer underflow wrap or wraparound in Windows NTFS allows an authorized attacker to disclose information locally...

PT-2026-112738

Name of the Vulnerable Software and Affected Versions Windows Phone Service affected versions not specified Description A race condition exists in the Windows Phone Service, where concurrent execution using a shared resource occurs without proper synchronization. This flaw allows an authorized...

PT-2026-112737

Name of the Vulnerable Software and Affected Versions Windows Volume Manager Extension Driver affected versions not specified Description An out-of-bounds read in the Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally. An out-of-bounds read occurs...