CVE-2026-68847: Use After Free

Use after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally...

CVE-2026-67368: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-69322: Double Free

Double free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges over a network...

CVE-2026-77480: Insufficient Granularity of Access Control

Insufficient granularity of access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-69689: Out-of-bounds Read

Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network...

CVE-2026-70564: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

CVE-2026-70342: Use After Free

Use after free in Windows Ancillary Function Driver for WinSock allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-69475: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally...

CVE-2026-69407: Integer Overflow or Wraparound

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-69332: Out-of-bounds Read

Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges over a network...

CVE-2026-71333: Use After Free

Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-68896: Absolute Path Traversal

Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

CVE-2026-73005: Use After Free

Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally...

CVE-2026-77487: Improper Access Control

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-68827: Integer Underflow (Wrap or Wraparound)

Integer underflow wrap or wraparound in Windows GDI+ allows an authorized attacker to elevate privileges over a network...

PT-2026-87943

Weak authentication in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-87213

Permissive cross-domain policy with untrusted domains in Azure Arc allows an unauthorized attacker to elevate privileges over a network...

PT-2026-87479

Use after free in Windows Management Instrumentation allows an authorized attacker to elevate privileges over a network...

PT-2026-87387

Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges over a network...

PT-2026-88051

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...