KB5126836: Windows Server 2012 R2 Security Update (October 2026)

The remote Windows host is missing security update 5126836. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Heap-based buffer overflow in Network Poli...

Microsoft Windows: CVE-2026-83866: Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

PT-2026-112023

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A use after free condition in the Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally. Use after free is a memory...

Microsoft Windows: CVE-2026-70067: Windows Win32k Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

Microsoft Office: CVE-2026-97743: Microsoft Excel: CVE-2026-97743

Use after free in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...

PT-2026-111434

Use-after-free in the Crash Reporting component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5...

Microsoft Windows: CVE-2026-70140: Windows Audio Service Elevation of Privilege Vulnerability

Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally...

PT-2026-112744

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use after free issue exists in Windows Installer. This allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

ROS-20261013-73-0130

The vulnerability in the kernel-lt is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Windows: CVE-2026-97809: Windows Broadcast DVR User Service Elevation of Privilege Vulnerability

Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83679: Windows Defender Firewall Service Elevation of Privilege Vulnerability

Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

PT-2026-113142

Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...

PT-2026-111445

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5...

Microsoft Windows: CVE-2026-97789: Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83701: Windows Now Playing Session Manager Elevation of Privilege Vulnerability

Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-109945: Concurrent Execution using Shared Resource with Improper Synchronization

FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when SCARDIOCTLDISCONNECT and SCARDIOCTLTRANSMIT operate concurrently on one card handle. A malicious RDP server can overlap these IRPs through separate context workers to free and reuse the SCardHandl...

PT-2026-112455

Name of the Vulnerable Software and Affected Versions Windows Audio Service affected versions not specified Description A use-after-free condition in the Windows Audio Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when...

Microsoft Windows: CVE-2026-72934: Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

PT-2026-113480

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description A use after free issue exists in the SVG component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker...

Microsoft Windows: CVE-2026-88107: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...