CVE-2026-83689

A Use after free vulnerability exists in Windows Error Reporting . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with high impact on confidentiality, integrity, and availability. Remediation is available via an official fix from...

CVE-2026-83709

A heap-based buffer overflow vulnerability exists in Windows NTLM . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability's technical impact is high regarding confidentiality, integrity, and availability, the documents do not provide specific explo...

CVE-2026-83702

A Use after free vulnerability exists in Windows Installer , which allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.0 (High), with impact across confidentiality, integrity, and availability. Official remediation is available via Microsoft.

CVE-2026-83668

An out-of-bounds read vulnerability exists in the Windows WLAN Service . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of intended memory boundaries. The official CVSS 3.1 score is 5.5 (Medium) , indicating a local attack vector with low...

CVE-2026-83676

The Windows Installer component is vulnerable to an integer underflow (wrap or wraparound) . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed, specific technical details regarding the affected functions or files are not provided ...

EUVD-2026-99946

Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-99943

Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally...

EUVD-2026-99927

Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally...

CVE-2026-83634

A double free vulnerability in Windows BitLocker allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-415 . While the specific component or file is not detailed in the provided documents, the impact involves high consequences for confidenti...

CVE-2026-83636

A null pointer dereference vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to perform a local denial of service (DoS) attack. While the documents confirm the impact on availability, no specific component, file, or version details are provided. No exploits are cur...

EUVD-2026-99928

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...

CVE-2026-83656

A missing authentication vulnerability exists in the Windows Modern Device Management (MDM) component. This flaw allows an authorized attacker to perform tampering locally by accessing a critical function without proper authentication. The CVSS 3.1 score is 4.7 (Medium) , indicating a local attac...

EUVD-2026-99932

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...

EUVD-2026-99920

Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack...

EUVD-2026-99918

Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2026-83588

A heap-based buffer overflow exists in the Windows USB Driver . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit details or in-the-wild exploitation information are provided in the documents.

CVE-2026-83567

A vulnerability exists in Windows NTFS where an out-of-bounds read (CWE-125) allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.8 (High) . While the documents confirm the existence of an official fix , no specific patch versions or wo...

CVE-2026-83585

The Windows NTFS file system is vulnerable to a local privilege escalation flaw caused by the use of externally-controlled format strings (CWE-134). An authorized attacker can exploit this issue to elevate their privileges on the local system. No specific exploit links or in-the-wild exploitation...

CVE-2026-83587

A vulnerability exists in Windows Core Messaging due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . No specific version numbers or exploitation details are provided in the documentation, but an official fix is noted as the rem...

CVE-2026-83573

An integer overflow or wraparound vulnerability exists in a Windows Kernel Mode Driver . This flaw allows an unauthorized attacker to elevate privileges by performing a physical attack . The vulnerability is characterized by a MEDIUM base severity score (6.8) and involves a PHYSICAL attack vector...