Microsoft Windows: CVE-2026-85822: Windows exFAT File System Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85821: Windows Universal Disk Format File System Driver (UDFS) Information Disclosure Vulnerability

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-96933: Windows COM+ Event System Service Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96209: Windows Network File System Elevation of Privilege Vulnerability

Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally...

CVE-2026-96933: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

CVE-2026-96209: Out-of-bounds Read

Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally...

CVE-2026-69675: Out-of-bounds Read

Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally...

CVE-2026-96949: Concurrent Execution using Shared Resource with Improper Synchronization

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

PT-2026-113151

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A use-after-free condition in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges...

PT-2026-111279

Name of the Vulnerable Software and Affected Versions SourceCodester Performance Indicator System version 1.0 Description Remote SQL injection is possible due to improper processing of the /opils/staff/product.php endpoint. An attacker can exploit this by manipulating the Category variable to...

CVE-2026-84009: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Projected File System allows an authorized attacker to perform tampering locally...

PT-2026-112579

Name of the Vulnerable Software and Affected Versions Windows COM+ Event System Service affected versions not specified Description A use-after-free condition in the Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruptio...

PT-2026-112597

Name of the Vulnerable Software and Affected Versions Windows COM+ Event System Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows COM+ Event System Service. This issue allows an authorized attacker to elevate privileges locally on the system. A...

PT-2026-112558

Name of the Vulnerable Software and Affected Versions Windows Input System affected versions not specified Description A type confusion issue occurs when a resource is accessed using an incompatible type. This allows an authorized attacker to elevate privileges locally on the system...

PT-2026-112488

Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description An absolute path traversal issue exists that allows an authorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is...

CVE-2026-109110: Improper Neutralization of Special Elements used in an OS Command

A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was...

CVE-2026-109521: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects an unknown function of the file changebookingstatus.php. Performing a manipulation of the argument dateselected results in sql injection. The attack may be...

PT-2026-111326

Name of the Vulnerable Software and Affected Versions AdithyaYelloju Restaurant-Management-System versions up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c Description An issue exists in the Password Reset component within the file 'User/forgot3.php'. Remote attackers can perform SQL injection, a...

CVE-2026-96947: Use After Free

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

PT-2026-112252

Name of the Vulnerable Software and Affected Versions Windows Network File System affected versions not specified Description A heap-based buffer overflow occurs in the Windows Network File System, which allows an authorized attacker to execute code locally. Additionally, remote attackers may be...