Npcap driver installed without administrator-only access restriction on Windows in Arc before v2.7.0

Summary The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver was accessible to every local user of the host instead of being restricted to administrators only. Impact A local user without administrative privileges could use the...

PT-2026-70523

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Cloud Files Mini Filter Driver. This issue allows an authorized attacker to elevate privileges locally on the...

PT-2026-70476

Name of the Vulnerable Software and Affected Versions Windows Cloud Files Mini Filter Driver affected versions not specified Description A heap-based buffer overflow occurs in the Windows Cloud Files Mini Filter Driver. This issue allows an authorized attacker to elevate privileges locally on the...

PT-2026-70551

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment...

PT-2026-70444

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally, which enables them to affect the system. Recommendations At the moment, the...

PT-2026-70464

Name of the Vulnerable Software and Affected Versions Windows Universal Disk Format File System Driver UDFS affected versions not specified Description A heap-based buffer overflow exists in the Windows Universal Disk Format File System Driver UDFS. This issue allows an unauthorized attacker to...

PT-2026-70403

Name of the Vulnerable Software and Affected Versions Windows Telephony Service affected versions not specified Description A race condition occurs in the Windows Telephony Service due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileg...

PT-2026-70406

Name of the Vulnerable Software and Affected Versions Windows Event Logging Service affected versions not specified Description A race condition exists in the Windows Event Logging Service. This occurs when concurrent execution using a shared resource lacks proper synchronization, allowing an...

PT-2026-70462

Name of the Vulnerable Software and Affected Versions Windows Program Compatibility Assistant Service affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows Program Compatibility Assistant Service. This issue allows an authorized attacker to...

PT-2026-70432

Name of the Vulnerable Software and Affected Versions Windows DHCP Client affected versions not specified Description A use after free condition exists in the Windows DHCP Client. This allows an authorized attacker to execute arbitrary code locally or a remote attacker to execute arbitrary code a...

PT-2026-70668

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description Improper access control in the Windows Kernel, specifically within the ipt.sys driver, allows an authorized attacker to perform a local privilege escalation. This occurs due to an...

PT-2026-70479

Name of the Vulnerable Software and Affected Versions Windows DHCP Server affected versions not specified Description An integer underflow wrap or wraparound occurs in the Windows DHCP Server, which allows an unauthorized attacker to disclose sensitive information over an adjacent network...

PT-2026-70576

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there is no...

PT-2026-70490

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description A time-of-check time-of-use toctou race condition exists in the Windows Common Log File System Driver. This occurs when a system checks a condition such as a...

PT-2026-70470

Name of the Vulnerable Software and Affected Versions Windows Modern Device Management MDM affected versions not specified Description A use-after-free condition in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally. Use-after-free is a memory...

PT-2026-70659

Name of the Vulnerable Software and Affected Versions Windows Remote Access API affected versions not specified Description A heap-based buffer overflow in the Windows Remote Access API allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow occurs when a program...

PT-2026-70654

Name of the Vulnerable Software and Affected Versions Windows GDI affected versions not specified Description An out-of-bounds read in Windows GDI allows an authorized attacker to disclose sensitive information locally, which may affect the system. Recommendations At the moment, there is no...

PT-2026-70775

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A stack-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. A stack-based buffer overflow is a condition where a...

PT-2026-70774

Name of the Vulnerable Software and Affected Versions Windows Installer affected versions not specified Description A heap-based buffer overflow occurs in Windows Installer, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memory corruption issu...

PT-2026-70686

Name of the Vulnerable Software and Affected Versions Windows iSCSI Target Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows iSCSI Target Service. This issue allows an unauthorized remote attacker to execute arbitrary code over a network,...