PT-2026-113512

Name of the Vulnerable Software and Affected Versions CAI Content Credentials affected versions not specified Description Improper input validation allows an attacker to bypass security features and obtain unauthorized write access. This issue can be exploited without any user interaction...

PT-2026-112286

Name of the Vulnerable Software and Affected Versions Windows PowerShell affected versions not specified Description A protection mechanism failure allows an authorized attacker to locally bypass a security feature, which can lead to an impact on the system. Recommendations At the moment, there i...

PT-2026-113514

CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...

PT-2026-112391

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Security Center allows an authorized attacker to elevate privileges locally...

PT-2026-112289

Inconsistent interpretation of http requests 'http request/response smuggling' in ASP.NET Core allows an unauthorized attacker to bypass a security feature over a network...

Microsoft Windows: CVE-2026-70075: Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability

Time-of-check time-of-use toctou race condition in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...

Microsoft .NET: CVE-2026-70174: .NET Remote Code Execution Vulnerability

Improperly implemented security check for standard in .NET allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83516: Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability

Out-of-bounds read in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to deny service over a network...

Microsoft Windows: CVE-2026-81964: Windows Update Orchestrator Service Security Feature Bypass Vulnerability

Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-71347: Windows Security Center Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Security Center allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85939: Windows Kernel Security Feature Bypass Vulnerability

Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network...

Microsoft Windows: CVE-2026-87705: Windows Hyper-V Security Feature Bypass Vulnerability

Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature over an adjacent network...

Microsoft Windows: CVE-2026-69640: Windows Key Distribution Center Security Feature Bypass Vulnerability

Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network...

Microsoft Windows: CVE-2026-83766: Windows Hyper-V Security Feature Bypass Vulnerability

Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network...

Microsoft Windows: CVE-2026-70087: Role: DNS Server Security Feature Bypass Vulnerability

Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally...

Microsoft Windows: CVE-2026-85805: Microsoft PowerShell Security Feature Bypass Vulnerability

Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...

Microsoft Windows: CVE-2026-88098: Windows Security Support Provider Interface Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87710: Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability

Improper access control in Microsoft Local Security Authority Server lsasrv allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-87714: WebDAV Security Feature Bypass Vulnerability

Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network...

Microsoft .NET: CVE-2026-96957: .NET Security Feature Bypass Vulnerability

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network...