PT-2026-2667

Name of the Vulnerable Software and Affected Versions Windows Error Reporting versions prior to January 2026 Description Improper handling of permissions in the Windows Error Reporting WER service allows an authorized local attacker to elevate privileges to NT AUTHORITYSYSTEM. The issue exists in...

CVE-2026-20931: External Control of File Name or Path

External control of file name or path in Windows Telephony Service allows an authorized attacker to elevate privileges over an adjacent network...

PT-2026-2664

Name of the Vulnerable Software and Affected Versions Versions prior to the fixed version affected versions not specified Description A flaw exists due to concurrent execution using a shared resource with improper synchronization, creating a race condition in the Graphics Kernel. This allows a...

CVE-2026-20830: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Capability Access Management Service camsvc allows an authorized attacker to elevate privileges locally...

CVE-2026-20940: Untrusted Pointer Dereference

Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-20965: Improper Verification of Cryptographic Signature

Improper verification of cryptographic signature in Windows Admin Center allows an authorized attacker to elevate privileges locally...

CVE-2026-20842: Use After Free

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally...

Microsoft Windows 竞争条件问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. Microsoft Windows suffers from a Competitive Conditions Issue vulnerability. An attacker could exploit this vulnerability to gain elevated privileges. The following...

PT-2026-2764

CVE-2026-21224 Stack-based buffer overflow in Azure Connected Machine Agent allows an authorized attacker to elevate privileges locally. https://t.co/nj6zlxVciK...

Cyclades Serial Console Server 安全漏洞

Cyclades Serial Console Server is a serial console server appliance from Cyclades USA. A security vulnerability exists in Cyclades Serial Console Server version 3.3.0, which stems from overly lax sudo privileges that could lead to local elevation of privilege...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. Microsoft Windows suffers from a resource management error vulnerability. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

CVE-2026-20920: Use After Free

Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...

CVE-2026-20859: Use After Free

Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2026-20820: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-20849: Reliance on Untrusted Inputs in a Security Decision

Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network...

CVE-2026-20848: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-20919: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows SMB Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-20876: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-20803: Missing Authentication for Critical Function

Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network...

MiracleLinux 8 : dotnet9.0-9.0.102-1.el8_10 (AXSA:2025-9578:04)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9578:04 advisory. dotnet: .NET Remote Code Execution Vulnerability CVE-2025-21171 dotnet: .NET and Visual Studio Remote Code Execution Vulnerability CVE-2025-21172...