PT-2026-112002

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally...

PT-2026-111947

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Incorrect authorization allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version th...

PT-2026-111946

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Missing authorization allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version that...

KLA91340 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, spoof user interface, gain privileges, obtain sensitive information, cause denial of service. Below is a complete list of...

PT-2026-111948

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper control of code generation leads to a code injection issue, allowing an authorized attacker to elevate privileges over a network. Recommendations At the moment,...

KLA91338 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user...

KLA91347 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...

KLA91343 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, perform cross-site scripting attack, spoof user interface. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in...

Microsoft SQL Server: CVE-2026-85919: Microsoft SQL Server Elevation of Privilege Vulnerability

Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-70168: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96318: Windows Resume Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-105007: Windows NDIS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...

PT-2026-112315

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A relative path traversal issue exists in Windows Shell. This flaw allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...

PT-2026-111430

Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5...

PT-2026-111974

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...

PT-2026-112391

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Security Center allows an authorized attacker to elevate privileges locally...

CVE-2026-100201: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85364: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83920: Windows Search Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83650: Windows Media Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally...