Microsoft PC Manager < 3.22.1.0 Elevation of Privilege (CVE-2026-50438) (July 2026)

The Windows 'Microsoft PC Manager' app installed on the remote host is prior to 3.22.1.0. It is, therefore, affected by an elevation of privilege vulnerability: - A local privilege escalation vulnerability allows an authenticated attacker to escalate privileges beyond the vulnerable component's...

Microsoft PC Manager < 3.21.6.0 Elevation of Privilege (CVE-2026-58636) (July 2026)

The Windows 'Microsoft PC Manager' app installed on the remote host is prior to 3.21.6.0. It is, therefore, affected by an elevation of privilege vulnerability: - A local privilege escalation vulnerability allows an authenticated attacker to gain elevated privileges on the system. CVE-2026-58636...

Security Updates for Microsoft SQL Server (July 2026)

The Microsoft SQL Server installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over...

Security Updates for Microsoft Office Products (July 2026)

The Microsoft Office Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-55045 - Heap-based buffer overflow in Microsoft Office allows an...

PT-2026-58378

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description An out-of-bounds read in the Windows Kernel allows an authorized attacker to elevate privileges locally. An out-of-bounds read occurs when the software reads data past the end of the...

KB5099540: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (July 2026)

The remote Windows host is missing security update 5099540. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

PT-2026-58255

Name of the Vulnerable Software and Affected Versions Windows Remote Help Defense affected versions not specified Description Improper access control allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that...

PT-2026-58163

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system...

PT-2026-58447

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

PT-2026-58151

Name of the Vulnerable Software and Affected Versions Windows 10 Version 1607 Description Improper privilege management in the Windows WalletService allows an authorized attacker to elevate privileges locally. This issue enables an attacker to gain higher-level access to the system. Recommendatio...

PT-2026-58235

Name of the Vulnerable Software and Affected Versions Quality Windows Audio/Video Experience QWAVE service affected versions not specified Description A use-after-free condition in the Quality Windows Audio/Video Experience QWAVE service allows an authorized attacker to elevate privileges locally...

PT-2026-58299

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An untrusted pointer dereference allows an unauthorized attacker to perform local information disclosure. This issue occurs when the software accesses a memory address through ...

PT-2026-58138

Name of the Vulnerable Software and Affected Versions Microsoft Brokering File System affected versions not specified Description A use-after-free condition exists in the Microsoft Brokering File System. A use-after-free is a memory corruption issue that occurs when an application continues to us...

Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability

Microsoft Active Directory Federation Services contains an insufficient granularity of access control vulnerability that allows an authorized attacker to elevate privileges locally...

PT-2026-58529

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This flaw allows an unauthorized attacker to execute arbitrary code locally on the system ...

PT-2026-58345

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow exists in the Windows Resilient File System ReFS, which allows an unauthorized attacker to execute code locally. This issue occurs duri...

PT-2026-58546

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description Use of an uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose sensitive information locally and affect the system. Recommendations At the moment,...

PT-2026-58228

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description A use after free issue exists in Windows Hyper-V, which could allow an unauthorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when...

PT-2026-58550

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An out-of-bounds read exists in Microsoft Office Excel, which allows an unauthorized attacker to disclose sensitive information locally through the use of malicious content...

PT-2026-58416

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description An out-of-bounds read in the Windows DWM Core Library allows an authorized attacker to disclose information locally. This issue involves memory leaking to logged-in attackers...