CVE-2026-62810: Heap-based Buffer Overflow

Heap-based buffer overflow in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

CVE-2026-69821: Improper Encoding or Escaping of Output

Improper encoding or escaping of output in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

PT-2026-88051

Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network...

PT-2026-87540

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use-after-free condition exists in Windows Remote Desktop Services. This occurs when a program continues to use a pointer after it has been freed, which can be...

CVE-2026-69599: Use After Free

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

CVE-2026-69607: Use After Free

Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...

CVE-2026-69536: Use After Free

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network...

PT-2026-87860

Name of the Vulnerable Software and Affected Versions Windows Deployment Services affected versions not specified Description A use after free condition in Windows Deployment Services allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Use after fr...

CVE-2026-83989: Out-of-bounds Read

Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network...

CVE-2026-78445: Use After Free

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to execute code over a network...

CVE-2026-70585: Use After Free

Use after free in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to execute code locally...

PT-2026-87399

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A heap-based buffer overflow occurs in Active Directory Domain Services, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overfl...

PT-2026-87201

Improper authorization in XBox Gaming Services allows an authorized attacker to elevate privileges locally...

CVE-2026-62813: Use After Free

Use after free in Active Directory Domain Services allows an authorized attacker to execute code over a network...

PT-2026-87921

Name of the Vulnerable Software and Affected Versions Windows Management Services affected versions not specified Description A heap-based buffer overflow occurs in Windows Management Services, which allows an authorized attacker to elevate privileges over a network. A heap-based buffer overflow ...

CVE-2026-69359: Heap-based Buffer Overflow

Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally...

CVE-2026-73012: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Management Services allows an authorized attacker to elevate privileges over a network...

KLA91262 PE vulnerabilities in Microsoft Apps

Privilege escalation vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Xbox Gaming Services can be exploited remotely to gain privileges. 2...

PT-2026-87500

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description An untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally. A pointer dereference occurs when a...

PT-2026-87549

Name of the Vulnerable Software and Affected Versions Windows Remote Desktop Services affected versions not specified Description A use after free issue in Windows Remote Desktop Services allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Use afte...