Microsoft Windows: CVE-2026-85342: Windows Device Association Service Elevation of Privilege Vulnerability

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

Microsoft Office: CVE-2026-97759: Microsoft Office Excel Remote Code Execution Vulnerability

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-70187: Windows Remote Desktop Services Remote Code Execution Vulnerability

Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-83917: Windows ALPC Elevation of Privilege Vulnerability

Use after free in Windows ALPC allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85354: Windows Error Reporting Elevation of Privilege Vulnerability

Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-88142: Windows Background Intelligent Transfer Service (BITS) Remote Code Execution Vulnerability

Use after free in Windows Background Intelligent Transfer Service BITS allows an unauthorized attacker to execute code over a network...

Microsoft Windows: CVE-2026-88152: Windows Background Intelligent Transfer Service (BITS) Elevation of Privilege Vulnerability

Use after free in Windows Background Intelligent Transfer Service BITS allows an authorized attacker to elevate privileges locally...

PT-2026-111528

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.0.0-beta1 through 3.31.0 Description An issue exists in smartcard handling where a use-after-free condition occurs. This allows an attacker to access a freed smartcard handle object following an invalid connect operation. By...

PT-2026-112258

Name of the Vulnerable Software and Affected Versions Windows Direct Composition affected versions not specified Description A use after free issue in Windows Direct Composition allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs whe...

PT-2026-112649

Name of the Vulnerable Software and Affected Versions Windows Update Orchestrator Service affected versions not specified Description A use after free issue exists in the Windows Update Orchestrator Service. This flaw allows an authorized attacker to elevate privileges locally. Use after free is ...

PT-2026-112741

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A use after free issue exists in Windows Installer. This allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an...

PT-2026-111438

Use-after-free in the DOM: Bindings WebIDL component. This vulnerability was fixed in Firefox 158 and Firefox ESR 153.5...

Microsoft Office: CVE-2026-88178: Microsoft Office PowerPoint Remote Code Execution Vulnerability

Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...

PT-2026-111666

Name of the Vulnerable Software and Affected Versions xen versions prior to 4.22.0 06-1.1 Description A race condition occurs during grant table operations when transitioning between v1 and v2. Specifically, a sequence of v2 to v1 and then back to v2 changes can cause status pages to be freed and...

Microsoft Windows: CVE-2026-83756: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...

PT-2026-112414

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A use-after-free condition in the Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges...

Microsoft Windows: CVE-2026-83752: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-85851: Use After Free

Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally...

PT-2026-112434

Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description A use-after-free condition in the Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

Microsoft Windows: CVE-2026-83717: Windows Installer Elevation of Privilege Vulnerability

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...