Microsoft Windows: CVE-2026-84009: Windows Projected File System Tampering Vulnerability

Time-of-check time-of-use toctou race condition in Windows Projected File System allows an authorized attacker to perform tampering locally...

CVE-2026-108471: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-108468: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-108396: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-108133: Release of Invalid Pointer or Reference

Release of invalid pointer or reference in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-108130: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-108136: Use After Free

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-85919: Heap-based Buffer Overflow

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70085: Role: DNS Server Tampering Vulnerability

Missing authorization in DNS Server allows an authorized attacker to perform tampering locally...

CVE-2026-87704: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-83740: Use After Free

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally...

CVE-2026-96920: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83763: Access of Resource Using Incompatible Type

Access of resource using incompatible type 'type confusion' in Windows Input System allows an authorized attacker to elevate privileges locally...

CVE-2026-87708: Use After Free

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2026-112407

Name of the Vulnerable Software and Affected Versions Windows Setup Files Cleanup affected versions not specified Description A time-of-check time-of-use toctou race condition exists in Windows Setup Files Cleanup. This occurs when a program checks the state of a resource before using it, but the...

Microsoft Windows: CVE-2026-87709: Windows Host Guardian Service Tampering Vulnerability

Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally...

PT-2026-112761

Name of the Vulnerable Software and Affected Versions Windows Sysmain Service affected versions not specified Description Exposure of sensitive system information to an unauthorized control sphere in the Windows Sysmain Service allows an authorized attacker to disclose information locally...

PT-2026-113238

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A use-after-free condition exists in the Windows Broadcast DVR User Service. This allows an authorized attacker to elevate privileges locally on the system...

CVE-2026-69909: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83714: HTTP.sys Information Disclosure Vulnerability

Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally...