CVE-2026-83708

A stack-based buffer overflow exists in Windows Installer , which allows an authorized attacker to achieve local privilege escalation . While the vulnerability's root cause is identified as a buffer overflow (CWE-121), specific affected versions and exploit links are not provided in the documents...

CVE-2026-83705

A vulnerability in Windows HTTP.sys allows an authorized attacker to disclose sensitive system information locally. This issue is categorized as an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). The vulnerability has a Medium severity (CVSS 3.1 score of 5.5)...

CVE-2026-83707

A Use after free vulnerability exists in Windows Event Tracing . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high CVSS 3.1 base score of 7.0, impacting confidentiality, integrity, and availability. Official remediation is ...

CVE-2026-83706

A Use after free vulnerability exists in the Windows NTFS file system. This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed with a CVSSv3.1 score of 6.7 (Medium), specific details regarding the affected component, root cause, or avai...

EUVD-2026-99329

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

CVE-2026-83690

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . While the specific component or file is not identified in the provided documents, the vulnerability is confirmed to have a HIGH base severity (CVSS 3.1: 7.8...

EUVD-2026-99338

Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally...

EUVD-2026-99324

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally...

EUVD-2026-99326

Weak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally...

CVE-2026-83671

An out-of-bounds read vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to perform a local information disclosure , potentially revealing sensitive data. No specific root cause, affected versions, or exploit details are provided in the documents; however, an offici...

CVE-2026-83675

A use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to perform a local privilege elevation . The vulnerability is reported with a High base severity score of 7.0. Remediation is available via an official fix provided by Microsoft.

CVE-2026-83669

A vulnerability exists in Windows Error Reporting due to the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild ex...

EUVD-2026-99322

Out-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally...

CVE-2026-83644

A Use after free vulnerability in the Windows Audio Service allows an authorized attacker to achieve local privilege escalation . The vulnerability impacts the service's ability to manage memory safely, potentially allowing a low-privileged user to gain higher system privileges. Remediation is av...

CVE-2026-83658

A vulnerability exists in Windows Error Reporting due to improper access control . This flaw allows an authorized attacker to perform a local information disclosure . The impact is classified as high regarding confidentiality, with a CVSS 3.1 base score of 5.5. Remediation is available via an off...

EUVD-2026-99320

Concurrent execution using shared resource with improper synchronization 'race condition' in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges locally...

EUVD-2026-99316

Missing authentication for critical function in Windows Modern Device Management MDM allows an authorized attacker to elevate privileges locally...

CVE-2026-83650

A heap-based buffer overflow exists in Windows Media , which allows an authorized attacker to achieve local privilege elevation . No specific affected versions, root cause components, or remediation details are provided in the documents. No exploitation details are available.

CVE-2026-83510

A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Setup Files Cleanup . This vulnerability allows an authorized attacker to achieve local privilege escalation . The security impact includes high consequences for confidentiality, integrity, and availability. While the vulnerabi...

CVE-2026-83571

A null pointer dereference vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , indicating a local attack vector with low complexity requiring low privileges. Exploitation detai...