EUVD-2026-43541

Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Glarysoft Glary Utilities. An attacker must first obtain the ability to execute low-privileged code on the target system...

EUVD-2026-43595

SAP S/4HANA Draft operation does not perform necessary authorization checks for an authenticated user, a restricted user could access information within the entity resulting in escalation of privileges. This results in low impact on confidentiality, with no impact on integrity and availability of...

CVE-2026-44771

Technical details about CVE-2026-44771 are not publicly available in the provided documents; monitor for updates as new information may be released.

CVE-2026-44771 Missing Authorization check in SAP S/4HANA (Draft operation)

SAP S/4HANA Draft operation does not perform necessary authorization checks for an authenticated user, a restricted user could access information within the entity resulting in escalation of privileges. This results in low impact on confidentiality, with no impact on integrity and availability of...

CVE-2026-44769

CVE-2026-44769 affects SAP S/4HANA Project Management (PPM-PRO). The connected documents describe a vulnerability where an attacker with high privileges can induce crafted database queries, resulting in exposure of the backend database. The impact is specified as low for confidentiality (C:H) wit...

PT-2026-58400

Name of the Vulnerable Software and Affected Versions Windows Connected User Experiences and Telemetry affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This flaw allows an authorized local attacker to elevate their...

PT-2026-58436

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A use after free issue in the Windows Kernel allows an unauthorized local attacker to elevate their privileges from a standard user to a higher level of access. Recommendations Install...

PT-2026-58491

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A heap-based buffer overflow exists in the Windows NTFS file system. This issue allows an unauthorized attacker to elevate privileges through a physical attack, such as using a rogue USB...

KLA91145 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products ESU. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...

PT-2026-58494

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A use after free issue in Windows NTFS allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues t...

PT-2026-58389

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A use-after-free condition in the Windows Runtime allows an authorized attacker to elevate privileges locally. A use-after-free is a memory corruption issue that occurs when an application...

PT-2026-58672

Name of the Vulnerable Software and Affected Versions Windows Client-Side Caching CSC Service affected versions not specified Description A use-after-free condition in the Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memo...

PT-2026-58639

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Improper authorization allows an authorized attacker to elevate privileges over a network, enabling them to affect the system. Recommendations At the moment, there is no...

PT-2026-58017

Name of the Vulnerable Software and Affected Versions Citrix Secure Access Client for Windows versions prior to 26.6.1.20 Citrix Endpoint Analysis Client for Windows versions prior to 26.5.1.7 Description Improper privilege management allows a low-privileged user with local access to escalate the...

VulnCheck KEV: CVE-2026-56164

Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-36035

Incorrect access control in the /api/License/deactivateOffline endpoint of CAXPerts UniversalPlantViewer WebServices Server v2.7.6 allows authenticated attackers with low-level privileges to cause a Denial of Service DoS via removing the license from the webserver...

PT-2026-58261

Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

PT-2026-58360

Name of the Vulnerable Software and Affected Versions Windows Key Guard affected versions not specified Description A race condition exists in Windows Key Guard, where concurrent execution using a shared resource with improper synchronization allows an authorized local attacker to elevate...

PT-2026-58161

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description A stack-based buffer overflow in the Windows NTFS file system allows an authorized attacker to elevate privileges locally, potentially granting a low-privilege account administrative...

CVE-2026-36035

The CVE-2026-36035 entry concerns CAXPerts UniversalPlantViewer WebServices Server v2.7.6 where an incorrect access control in the /api/License/deactivateOffline endpoint allows authenticated attackers with low privileges to trigger a Denial of Service by removing the license from the webserver. ...