42 matches found
CVE-2026-68873: Insertion of Sensitive Information into Log File
Insertion of sensitive information into log file in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information locally...
CVE-2026-69563: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
PT-2026-87291
Name of the Vulnerable Software and Affected Versions Windows Program Compatibility Assistant Service affected versions not specified Description An out-of-bounds read in the Windows Program Compatibility Assistant Service allows an authorized attacker to disclose sensitive information over a...
CVE-2026-68876: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges over a network...
CVE-2026-68845: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69534: Improper Neutralization of Special Elements used in a Command
Improper neutralization of special elements used in a command 'command injection' in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-68874: Out-of-bounds Read
Out-of-bounds read in Windows Program Compatibility Assistant Service allows an authorized attacker to disclose information over a network...
CVE-2026-62696
Integer underflow wrap or wraparound in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
EUVD-2026-56346
Integer underflow wrap or wraparound in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62696 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
...
CVE-2026-62696 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
...
CVE-2026-62696
CVE-2026-62696 impacts the Windows Program Compatibility Assistant Service. The advisory describes an integer underflow (wrap/wraparound) that allows an authorized local attacker to elevate privileges. CVSS: 3.1, Base score 7.8 (HIGH), with Local attack vector, Low attack complexity, Privileges r...
Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Integer underflow wrap or wraparound in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62696: Integer Underflow (Wrap or Wraparound)
Integer underflow wrap or wraparound in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
PT-2026-70462
Name of the Vulnerable Software and Affected Versions Windows Program Compatibility Assistant Service affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows Program Compatibility Assistant Service. This issue allows an authorized attacker to...
EUVD-2026-35673
Time-of-check time-of-use TOCTOU race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-45487
Time-of-check time-of-use TOCTOU race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
CVE-2026-45487 Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
...
CVE-2026-45487: Time-of-check Time-of-use (TOCTOU) Race Condition
Time-of-check time-of-use TOCTOU race condition in Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...
PT-2026-47969
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A Time-of-check time-of-use TOCTOU race condition exists in the Program Compatibility Assistant Service. This flaw allows an authorized attacker to elevate privileges locally, enabling them t...