CVE-2026-83634

A double free vulnerability in Windows BitLocker allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-415 . While the specific component or file is not detailed in the provided documents, the impact involves high consequences for confidenti...

CVE-2026-83636

A null pointer dereference vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to perform a local denial of service (DoS) attack. While the documents confirm the impact on availability, no specific component, file, or version details are provided. No exploits are cur...

EUVD-2026-99928

Null pointer dereference in Windows Hyper-V allows an authorized attacker to deny service locally...

CVE-2026-83656

A missing authentication vulnerability exists in the Windows Modern Device Management (MDM) component. This flaw allows an authorized attacker to perform tampering locally by accessing a critical function without proper authentication. The CVSS 3.1 score is 4.7 (Medium) , indicating a local attac...

EUVD-2026-99932

Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally...

EUVD-2026-99920

Integer overflow or wraparound in Windows Kernel Mode Driver allows an unauthorized attacker to elevate privileges with a physical attack...

EUVD-2026-99918

Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally...

CVE-2026-83588

A heap-based buffer overflow exists in the Windows USB Driver . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit details or in-the-wild exploitation information are provided in the documents.

CVE-2026-83567

A vulnerability exists in Windows NTFS where an out-of-bounds read (CWE-125) allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.8 (High) . While the documents confirm the existence of an official fix , no specific patch versions or wo...

CVE-2026-83585

The Windows NTFS file system is vulnerable to a local privilege escalation flaw caused by the use of externally-controlled format strings (CWE-134). An authorized attacker can exploit this issue to elevate their privileges on the local system. No specific exploit links or in-the-wild exploitation...

CVE-2026-83587

A vulnerability exists in Windows Core Messaging due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . No specific version numbers or exploitation details are provided in the documentation, but an official fix is noted as the rem...

CVE-2026-83573

An integer overflow or wraparound vulnerability exists in a Windows Kernel Mode Driver . This flaw allows an unauthorized attacker to elevate privileges by performing a physical attack . The vulnerability is characterized by a MEDIUM base severity score (6.8) and involves a PHYSICAL attack vector...

CVE-2026-83568

A vulnerability in Windows Kernel-Mode Drivers involves improper access control , which allows an authorized attacker to achieve local privilege elevation . The issue is associated with CWE-862 (Missing Authorization) . No specific exploit details, affected versions, or remediation instructions a...

EUVD-2026-99916

Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...

CVE-2026-83582

A Use after free vulnerability exists in the Windows Graphics Kernel . This flaw allows an authorized attacker to perform a local information disclosure attack. The impact is categorized as a high confidentiality risk with a CVSS 3.1 base score of 4.7 . While the specific component or file within...

EUVD-2026-99915

Buffer over-read in Windows Encrypting File System EFS allows an authorized attacker to disclose information locally...

CVE-2026-83509

An untrusted search path vulnerability in Windows Setup Files Cleanup allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-426 . While the root cause is identified as an untrusted search path, specific exploitation details are not provided ...

CVE-2026-83506

An untrusted search path vulnerability in Servicing Stack Updates allows an authorized attacker to perform a local privilege escalation . The vulnerability is associated with CWE-426 and has a HIGH base severity score of 7.8 . While the vulnerability is confirmed, specific details regarding affec...

CVE-2026-73027

The Windows Setup Files Cleanup component is vulnerable to an elevation of privilege vulnerability due to external control of system or configuration settings. This flaw allows an authorized attacker to perform a local privilege escalation. While the impact is categorized as High for confidential...

CVE-2026-69635

A heap-based buffer overflow exists in Windows Installer , which could allow an authorized attacker to elevate privileges through a physical attack . The vulnerability is associated with CWE-122 . No specific exploit details or in-the-wild exploitation information are provided in the documents. R...