CVE-2026-45586: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Collaborative Translation Framework allows an authorized attacker to elevate privileges locally...

CVE-2026-41108: Heap-based Buffer Overflow

Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally...

CVE-2026-42902: Improper Authorization

Improper authorization in Microsoft PowerToys allows an authorized attacker to elevate privileges locally...

CVE-2026-45504: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-45637: Use After Free

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-47281: Missing Authorization

Missing authorization in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-48566: Out-of-bounds Read

Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-42986: Use After Free

Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally...

CVE-2026-42979: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

PT-2026-47990

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

PT-2026-47891

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A race condition exists in the Windows Telephony Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileg...

PT-2026-47970

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description Improper authorization in the .NET software platform allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version tha...

CVE-2026-42837: Out-of-bounds Read

Out-of-bounds read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-45490: Improper Authorization

Improper authorization in .NET allows an authorized attacker to elevate privileges locally...

CVE-2026-50512: Missing Authentication for Critical Function

Missing authentication for critical function in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-42828: Buffer Over-read

Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-45484: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

PT-2026-47929

Name of the Vulnerable Software and Affected Versions Windows DWM Core Library affected versions not specified Description A use after free issue in the Windows DWM Core Library allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs whe...

CVE-2026-44802: Use After Free

Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2026-42836: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Function Discovery Service fdwsd.dll allows an authorized attacker to elevate privileges locally...