CVE-2026-83717

A Use after free vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to achieve local privilege escalation . Exploitation details are not provided in the documents. Remediation is available via an official fix .

CVE-2026-83728

A vulnerability in Windows Hyper-V arises from the improper validation of syntactic correctness of input . This flaw allows an authorized attacker to perform spoofing locally . The severity is rated as HIGH with a CVSS base score of 8.8. While the vulnerability is confirmed, specific details rega...

EUVD-2026-99969

Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally...

CVE-2026-83732

A Use after free vulnerability exists in the Windows Win32K component. This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploitation details or patch versions are provided in the documents.

EUVD-2026-99965

Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally...

EUVD-2026-99961

Use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally...

CVE-2026-83714

A use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-908 . While the specific technical root cause is not detailed beyond the uninitialized resource, the impact is categorized as a hi...

CVE-2026-83686

The Microsoft Windows Search Component is susceptible to an out-of-bounds read vulnerability. This flaw allows an authorized attacker to disclose information locally. The severity is rated as MEDIUM with a CVSS 3.1 score of 5.5, characterized by a high confidentiality impact and low attack comple...

CVE-2026-83689

A Use after free vulnerability exists in Windows Error Reporting . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with high impact on confidentiality, integrity, and availability. Remediation is available via an official fix from...

CVE-2026-83709

A heap-based buffer overflow vulnerability exists in Windows NTLM . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability's technical impact is high regarding confidentiality, integrity, and availability, the documents do not provide specific explo...

CVE-2026-83702

A Use after free vulnerability exists in Windows Installer , which allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.0 (High), with impact across confidentiality, integrity, and availability. Official remediation is available via Microsoft.

CVE-2026-83668

An out-of-bounds read vulnerability exists in the Windows WLAN Service . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of intended memory boundaries. The official CVSS 3.1 score is 5.5 (Medium) , indicating a local attack vector with low...

CVE-2026-83676

The Windows Installer component is vulnerable to an integer underflow (wrap or wraparound) . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed, specific technical details regarding the affected functions or files are not provided ...

EUVD-2026-99946

Use after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-99943

Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally...

EUVD-2026-99927

Double free in Windows BitLocker allows an authorized attacker to elevate privileges locally...

CVE-2026-83634

A double free vulnerability in Windows BitLocker allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-415 . While the specific component or file is not detailed in the provided documents, the impact involves high consequences for confidenti...

CVE-2026-83636

A null pointer dereference vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to perform a local denial of service (DoS) attack. While the documents confirm the impact on availability, no specific component, file, or version details are provided. No exploits are cur...

EUVD-2026-99928

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...

CVE-2026-83656

A missing authentication vulnerability exists in the Windows Modern Device Management (MDM) component. This flaw allows an authorized attacker to perform tampering locally by accessing a critical function without proper authentication. The CVSS 3.1 score is 4.7 (Medium) , indicating a local attac...