CVE-2026-20804

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally...

CVE-2026-0386

Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network...

CVE-2026-20804

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally...

CVE-2026-20953

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

CVE-2026-20824

Protection mechanism failure in Windows Remote Assistance allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-20818

CVE-2026-20818 is a Windows Kernel information-disclosure vulnerability caused by insertion of sensitive data into a log file, allowing a local attacker to disclose information. The CTI indicates this is a locally exploitable issue with a MEDIUM base score (CVSS 3.1: AV:L/AC:L/PR:N/UI:N/S:U/C:H/I...

CVE-2026-20804

Incorrect privilege assignment in Windows Hello allows an unauthorized attacker to perform tampering locally...

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

Microsoft Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

Microsoft Excel Security Feature Bypass Vulnerability

Improper access control in Microsoft Office Excel allows an unauthorized attacker to bypass a security feature locally...

Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability

Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...

Microsoft SharePoint Server Remote Code Execution Vulnerability

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code locally...

Windows Deployment Services Remote Code Execution Vulnerability

Improper access control in Windows Deployment Services allows an unauthorized attacker to execute code over an adjacent network...

PT-2026-2693

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A flaw exists in the Windows Clipboard Server that could allow an attacker to gain higher-level access to a system. This issue involves a use-after-free condition. An attacker could exploit...

PT-2026-2698

Name of the Vulnerable Software and Affected Versions Windows Hello affected versions not specified Description A flaw in Windows Hello’s privilege assignment allows a local attacker to perform tampering on the system. This issue could allow unauthorized access and manipulation of the system...

PT-2026-2745

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An out-of-bounds read issue exists in Microsoft Office Word, potentially allowing an unauthorized attacker to execute code locally. Recommendations At the moment, there is no...

PT-2026-2756

Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description An integer underflow condition exists in Microsoft Office Excel that could allow an unauthorized attacker to execute code locally. The issue is due to an integer underflow, als...

PT-2026-2753

🟠 CVE-2026-20953 - High Use after free in Microsoft Office allows an unauthorized attacker to execute code locally. https://t.co/3HYe8zgm3r https://t.co/TZ3AHieY4d...

PT-2026-2752

Name of the Vulnerable Software and Affected Versions Microsoft Office and Microsoft 365 Apps for Enterprise affected versions not specified Description A use-after-free condition exists in Microsoft Office and Microsoft 365 Apps for Enterprise. Exploitation of this issue could allow an attacker ...

PT-2026-2668

Name of the Vulnerable Software and Affected Versions Windows Kernel affected versions not specified Description The Windows Kernel has a flaw where sensitive information is being written into log files. This allows a local attacker to potentially disclose information. The issue allows attackers ...