PT-2026-70909

Name of the Vulnerable Software and Affected Versions SonicWall Email Security affected versions not specified Description An improper control of code generation allows an authenticated attacker with access to the restricted CLI to perform a local privilege escalation. By injecting arbitrary OS...

PT-2026-70984

Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability...

PT-2026-70526

Name of the Vulnerable Software and Affected Versions Windows Graphics Kernel affected versions not specified Description A use-after-free condition in the Windows Graphics Kernel allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs...

PT-2026-70496

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description An integer overflow in the Windows HTTP.sys driver can lead to a heap-based buffer overflow. This allows an authorized attacker to elevate privileges locally on the system...

PT-2026-70442

Name of the Vulnerable Software and Affected Versions Windows Display Enhancement Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows Display Enhancement Service. This issue allows an authorized attacker to elevate privileges locally on the syste...

PT-2026-70688

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description An issue in Windows DNS allows an authorized attacker to elevate privileges locally, which can enable them to affect the system. Recommendations At the moment, there is no information abo...

PT-2026-70325

Protection mechanism failure for some IntelR AI Reference Models before version v3.4.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This resul...

PT-2026-70675

Name of the Vulnerable Software and Affected Versions Windows Autopilot affected versions not specified Description A double free issue in Windows Autopilot allows an authorized attacker to elevate privileges locally. A double free occurs when the system attempts to free the same memory location...

PT-2026-70434

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description Missing authentication for a critical function allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations A...

PT-2026-70449

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description A heap-based buffer overflow occurs in the Windows Kernel, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue...

PT-2026-70445

Name of the Vulnerable Software and Affected Versions Windows USB Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows USB Driver, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruptio...

PT-2026-70697

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description A server-side request forgery SSRF issue allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where an attacker can induce the server to make...

PT-2026-70744

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A heap-based buffer overflow occurs in Windows DNS, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issue that happe...

PT-2026-70046

Name of the Vulnerable Software and Affected Versions SAP Approuter affected versions not specified Description SAP Approuter fails to consistently handle specific error conditions. A low-privileged attacker could exploit this behavior under a non-default configuration. Successful exploitation is...

PT-2026-70109

A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing administrator group by name. The SCIM group ingest function adop...

PT-2026-70136

Name of the Vulnerable Software and Affected Versions Peppermint Lab Peppermint versions prior to commit ba6e217 Description Broken access control allows authenticated non-administrative users to reconfigure global OIDC/SSO settings. This occurs because a configuration endpoint fails to perform...

PT-2026-70614

Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally...

PT-2026-70528

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment...

PT-2026-70394

Name of the Vulnerable Software and Affected Versions Azure Storage Explorer affected versions not specified Description Improper neutralization of input during web page generation leads to cross-site scripting XSS, a condition where malicious scripts are injected into trusted websites. This allo...

PT-2026-70295

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description Improper handling of overlap between protected memory ranges in some microcode within Ring 0: Hypervisor may allow an escalation of privilege. An authorized adversary with privilege...