Microsoft Windows: CVE-2026-83701: Windows Now Playing Session Manager Elevation of Privilege Vulnerability

Use after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-109945: Concurrent Execution using Shared Resource with Improper Synchronization

FreeRDP 3.0.0 before 3.32.0 contains a heap use-after-free vulnerability in smartcard emulation when SCARDIOCTLDISCONNECT and SCARDIOCTLTRANSMIT operate concurrently on one card handle. A malicious RDP server can overlap these IRPs through separate context workers to free and reuse the SCardHandl...

PT-2026-113470

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description A use after free issue exists in ShapeDetection. This allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the sandbox by using a...

PT-2026-112455

Name of the Vulnerable Software and Affected Versions Windows Audio Service affected versions not specified Description A use-after-free condition in the Windows Audio Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when...

Microsoft Windows: CVE-2026-72934: Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability

Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally...

PT-2026-113480

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description A use after free issue exists in the SVG component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker...

Microsoft Windows: CVE-2026-88107: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally...

PT-2026-111432

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5...

KB5127646: Windows 11 Version 26H1 Security Update (October 2026)

The remote Windows host is missing security update 5127646. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...

PT-2026-112093

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-84018: Windows Print Spooler Components Elevation of Privilege Vulnerability

Use after free in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83584: Windows Smart Card Elevation of Privilege Vulnerability

Use after free in Windows Smart Card allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-69991: Remote Desktop Client Remote Code Execution Vulnerability

Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70195: Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability

Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally...

Microsoft Windows: CVE-2026-85911: Windows StateRepository API Elevation of Privilege Vulnerability

Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85352: Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

PT-2026-112683

Name of the Vulnerable Software and Affected Versions Windows Direct Composition affected versions not specified Description A use after free issue in Windows Direct Composition allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs whe...

Microsoft SQL Server: CVE-2026-85876: Microsoft SQL Server Elevation of Privilege Vulnerability

Use after free in SQL Server allows an authorized attacker to elevate privileges locally...

PT-2026-112702

Name of the Vulnerable Software and Affected Versions Windows Telephony Server affected versions not specified Description A use after free issue in Windows Telephony Server allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

UBUNTU-CVE-2026-95702

Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The...