CVE-2026-83736

A heap-based buffer overflow exists in the Windows Kernel . This vulnerability allows an authorized attacker to perform a local privilege escalation . The official CVSS 3.1 score is 5.5 (Medium) , with a high impact on availability. Remediation via an official fix is available through Microsoft's...

CVE-2026-83724

A heap-based buffer overflow exists in Windows Management Instrumentation , which allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) . No specific exploit details, exploit links, or specific software versions are provided...

CVE-2026-83709

A heap-based buffer overflow vulnerability exists in Windows NTLM . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability's technical impact is high regarding confidentiality, integrity, and availability, the documents do not provide specific explo...

CVE-2026-83685

A buffer over-read vulnerability exists in the Windows IKE Extension . This flaw allows an authorized attacker to perform a denial of service (DoS) over the network. The vulnerability is confirmed by Microsoft metrics with a CVSS score of 6.5. No specific exploit details or remediation steps are ...

CVE-2026-83698

A heap-based buffer overflow exists in the Windows Client-Side Caching (CSC) Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit information or in-the-wild exploitation details are provided in the documents. Remediation involves a...

CVE-2026-83680

A heap-based buffer overflow vulnerability exists in Windows Installer . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 (HIGH) . While the technical root cause is identified as a heap overflow, no specific exploit ...

CVE-2026-83643

A stack-based buffer overflow vulnerability exists in Windows Error Reporting , which could allow an unauthorized attacker to execute code over a network . The vulnerability has a CVSS 3.1 base score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No...

CVE-2026-83638

A heap-based buffer overflow exists in the Windows USB Driver . This vulnerability allows an authorized attacker to perform a local privilege elevation . No specific versions are listed as affected, and no exploit details or proof-of-concept code are provided in the documents. Remediation involve...

CVE-2026-83640

A heap-based buffer overflow exists in Windows NTFS that allows an authorized attacker to achieve local code execution . The vulnerability is rated with a High severity (CVSS 3.1 score of 7.8). No specific exploit details or in-the-wild exploitation information are provided in the documents. Reme...

CVE-2026-83639

A heap-based buffer overflow vulnerability exists in the Windows Sensor Data Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS 3.1 score of 7.8 indicates a high severity, specific exploitation details or in-the-wild occurrences are not provid...

CVE-2026-83579

A heap-based buffer overflow exists in the Windows Smart Card component. This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific software versions, root causes, or exploit details are provided in the documents, but an official fix is indicated by the r...

CVE-2026-83588

A heap-based buffer overflow exists in the Windows USB Driver . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit details or in-the-wild exploitation information are provided in the documents.

CVE-2026-83517

A heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability is rated as CRITICAL with a CVSS score of 9.80 , as it enables an attacker to execute arbitrary code without prior authentication ...

CVE-2026-83565

A buffer over-read vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability is associated with CWE-126 . While the documents confirm the existence o...

CVE-2026-83514

A heap-based buffer overflow vulnerability exists in the Windows Partition Management Driver . This flaw allows an authorized attacker to achieve local privilege escalation . While the technical root cause is identified as a heap-based buffer overflow (CWE-122), specific exploit details or in-the...

CVE-2026-83523

A Heap-based buffer overflow vulnerability exists in Windows Image Acquisition . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a High severity rating with a CVSS 3.1 score of 8.8 . No specific exploit details or proof-of-concept l...

CVE-2026-83519

A heap-based buffer overflow exists in Windows Error Reporting , which could allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CVSS score of 9.80 and does not require prior authentication or user interaction. Exploitation details and specific patche...

CVE-2026-69471

A heap-based buffer overflow exists in the Windows Installer component. This vulnerability allows an authorized attacker to achieve local privilege escalation . The documentation identifies the root cause as a heap-based buffer overflow (CWE-122) and an out-of-bounds read (CWE-125). While the CVS...

CVE-2026-78459

A heap-based buffer overflow vulnerability exists in Windows Internet Information Services . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.8 (High) . Official remediation is available via Microsoft's update guide.

CVE-2026-69635

A heap-based buffer overflow exists in Windows Installer , which could allow an authorized attacker to elevate privileges through a physical attack . The vulnerability is associated with CWE-122 . No specific exploit details or in-the-wild exploitation information are provided in the documents. R...