PT-2026-87674

Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network...

PT-2026-87283

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use-after-free flaw in the Windows Kernel allows an authorized attacker to elevate privileges over a network, enabling them to affect the system. Use-after-free is a memory corruptio...

PT-2026-87479

Name of the Vulnerable Software and Affected Versions Windows Management Instrumentation affected versions not specified Description A use after free issue in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network. Use after free is a memory corrupti...

PT-2026-88143

Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

PT-2026-87853

Name of the Vulnerable Software and Affected Versions Windows SMB Client affected versions not specified Description A use after free condition in the Windows SMB Client allows an unauthorized remote attacker to execute arbitrary code over a network and affect the system. Use after free is a memo...

CVE-2026-69518: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network...

CVE-2026-73016: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...

CVE-2026-72977: Out-of-bounds Read

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

CVE-2026-72956: Untrusted Pointer Dereference

Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...

CVE-2026-72939: NULL Pointer Dereference

Null pointer dereference in Windows Routing and Remote Access Service RRAS allows an authorized attacker to deny service over a network...

CVE-2026-70587: Improper Null Termination

Improper null termination in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network...

CVE-2026-69860: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network...

CVE-2026-69382: Use of a Broken or Risky Cryptographic Algorithm

Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network...

CVE-2026-69366: Use After Free

Use after free in Windows Kernel allows an authorized attacker to elevate privileges over a network...

CVE-2026-69364: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...

CVE-2026-69346: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...

CVE-2026-66308: Out-of-bounds Read

Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network...

CVE-2026-63523: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Skype for Business allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-70579: Out-of-bounds Read

Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker to disclose information over a network...

CVE-2026-70351: Integer Overflow or Wraparound

Integer overflow or wraparound in Microsoft WebP Image Extension allows an unauthorized attacker to execute code over a network...