CVE-2026-85355: Inclusion of Functionality from Untrusted Control Sphere

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2026-85328: Weak Authentication

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-70143: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally...

CVE-2026-70084: Improper Limitation of a Pathname to a Restricted Directory

Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally...

CVE-2026-96209: Out-of-bounds Read

Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally...

CVE-2026-96930: Out-of-bounds Read

Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...

CVE-2026-96933: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-96946: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability

Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...

PT-2026-113155

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A null pointer dereference in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute arbitrary code...

Microsoft Windows: CVE-2026-85824: Windows Composite Image File System Elevation of Privilege Vulnerability

Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85328: Windows Projected File System Elevation of Privilege Vulnerability

Weak authentication in Windows Projected File System allows an authorized attacker to elevate privileges locally...

PT-2026-112179

Name of the Vulnerable Software and Affected Versions Windows Resilient File System ReFS affected versions not specified Description A heap-based buffer overflow occurs in the Windows Resilient File System ReFS, which allows an authorized attacker to elevate privileges locally. A heap-based buffe...

Microsoft Windows: CVE-2026-85870: Windows Common Log File System Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

PT-2026-112828

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description A use-after-free condition in the Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

PT-2026-112972

Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description Improper authorization in the Windows Encrypting File System EFS allows an authorized attacker to perform local tampering, which can affect the system...

ROS-20261013-73-0217

The vulnerability of the komedafbafbcsizecheck function in the drivers/gpu/drm/arm/display/komeda/komedaframebuffer.c file, a part of the Direct Rendering Infrastructure DRI driver for the Linux kernel, is related to integer overflow or cyclic shift vulnerabilities. Exploiting this vulnerability...

Microsoft Windows: CVE-2026-96938: Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to elevate privileges locally...

PT-2026-113529

CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in an arbitrary file system write. An attacker could leverage this vulnerability to write to unauthorized files or directories outside of intended...

Microsoft Windows: CVE-2026-85355: Windows Common Log File System Driver Elevation of Privilege Vulnerability

Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

PT-2026-113306

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager affected versions not specified Description An Improper Limitation of a Pathname to a Restricted Directory, also known as Path Traversal, allows a low-privileged attacker to perform arbitrary file system writes. This...