CVE-2026-83737

An out-of-bounds read vulnerability exists in the Windows NTFS file system. This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is associated with CWE-125 and has a CVSS 3.1 score of 5.5. No specific exploit details or remediation vers...

EUVD-2026-99974

Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-83735

A Release of invalid pointer or reference vulnerability in the Windows Kernel allows an authorized attacker to perform a local privilege escalation . This issue is associated with CWE-763 . While the vulnerability has a high severity score, specific details regarding the affected component, preci...

EUVD-2026-99979

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-83752

A Use after free vulnerability exists in Windows Installer which allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . While the documents confirm the existence of the flaw and its potential impact on local privileges, no specific e...

CVE-2026-83721

A Use after free vulnerability exists in Windows Win32K (CVE-2026-83721). This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a CVSS v3.1 base score of 7.8 (High) . No specific exploit details or mitigation steps are provided in the ...

CVE-2026-83718

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege escalation . The vulnerability results in high impact regarding confidentiality, integrity, and availability. Official remediation is available via Microsoft. No specific exploit code or i...

EUVD-2026-99970

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

EUVD-2026-99966

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally...

EUVD-2026-99963

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

EUVD-2026-99964

Use after free in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-83732

A Use after free vulnerability exists in the Windows Win32K component. This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploitation details or patch versions are provided in the documents.

CVE-2026-83716

A heap-based buffer overflow vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to achieve local code execution . While the specific component or file causing the overflow is not detailed in the provided documents, the vulnerability has a HIGH base severity score of...

CVE-2026-83717

A Use after free vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to achieve local privilege escalation . Exploitation details are not provided in the documents. Remediation is available via an official fix .

CVE-2026-83728

A vulnerability in Windows Hyper-V arises from the improper validation of syntactic correctness of input . This flaw allows an authorized attacker to perform spoofing locally . The severity is rated as HIGH with a CVSS base score of 8.8. While the vulnerability is confirmed, specific details rega...

EUVD-2026-99965

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

EUVD-2026-99969

Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally...

EUVD-2026-99961

Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally...

CVE-2026-83686

The Microsoft Windows Search Component is susceptible to an out-of-bounds read vulnerability. This flaw allows an authorized attacker to disclose information locally. The severity is rated as MEDIUM with a CVSS 3.1 score of 5.5, characterized by a high confidentiality impact and low attack comple...

CVE-2026-83714

A use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-908 . While the specific technical root cause is not detailed beyond the uninitialized resource, the impact is categorized as a hi...