CVE-2026-83779

A heap-based buffer overflow exists in Windows Installer , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by the CVSS 3.1 score of 7.8, indicating high severity. While the specific root cause or affected version is not detailed i...

CVE-2026-83727

A buffer over-read vulnerability exists in the Windows Overlay Filter component. This flaw allows an authorized attacker to achieve local privilege escalation . While the impact is categorized as High with potential effects on confidentiality, integrity, and availability, specific exploit details...

CVE-2026-83719

A buffer over-read vulnerability exists in Servicing Stack Updates , which allows an authorized attacker to disclose information locally . The vulnerability is associated with a MEDIUM severity rating (CVSS 3.1: 5.5) and is characterized by a LOCAL attack vector with LOW complexity. No specific e...

CVE-2026-83723

A use of uninitialized resource vulnerability in the Windows Event Logging Service allows an authorized attacker to disclose information locally. The vulnerability is associated with CWE-908 and has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit details or information regarding parti...

CVE-2026-83712

Windows NTFS is affected by an out-of-bounds write vulnerability. This flaw allows an authorized attacker to achieve local code execution . No specific affected versions, root causes, or remediation steps are provided in the documents. Exploitation details are not present.

CVE-2026-83726

A Use after free vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to achieve local privilege escalation . While the technical root cause is identified as a use after free (CWE-416), specific details regarding affected versions or manual workarounds ar...

CVE-2026-83749

A Use after free vulnerability exists in the Windows Overlay Filter , which allows an authorized attacker to achieve local privilege elevation . This vulnerability is identified as CVE-2026-83749 and has a CVSS 3.1 base score of 7.0 . Exploitation details and specific affected versions are not pr...

CVE-2026-83738

A Use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or exploitation links are provided in the documents. Remediation involves applying the official ...

CVE-2026-83715

The Windows Error Reporting service is vulnerable to a Missing Authentication for Critical Function (CWE-306) flaw. This vulnerability allows an authorized attacker to perform tampering locally on the affected system. The CVSS 3.1 base score is 7.1 (High) , with local access and low complexity re...

CVE-2026-83713

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to disclose information locally. The vulnerability is categorized under CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control ...

CVE-2026-83722

A Use after free vulnerability exists in the Microsoft Local Security Authority Server (lsasrv) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). While the documentation con...

CVE-2026-83692

A heap-based buffer overflow exists in the Windows Bind Filter Driver . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-83706

A Use after free vulnerability exists in the Windows NTFS file system. This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed with a CVSSv3.1 score of 6.7 (Medium), specific details regarding the affected component, root cause, or avai...

CVE-2026-83705

A vulnerability in Windows HTTP.sys allows an authorized attacker to disclose sensitive system information locally. This issue is categorized as an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). The vulnerability has a Medium severity (CVSS 3.1 score of 5.5)...

CVE-2026-83699

A stack-based buffer overflow exists in the Windows Client-Side Caching (CSC) Service . This vulnerability allows an authorized attacker to perform a local privilege escalation . Exploitation details and specific exploit links are not provided in the documents.

CVE-2026-83690

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . While the specific component or file is not identified in the provided documents, the vulnerability is confirmed to have a HIGH base severity (CVSS 3.1: 7.8...

CVE-2026-83694

An out-of-bounds read vulnerability exists in the Windows Volume Manager Extension Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a CVSS 3.1 base score of 7.0 (High) . Remediation involves applying the official fix pro...

CVE-2026-83691

A heap-based buffer overflow exists in the Windows DHCP Server component. This vulnerability allows an authorized attacker to perform a local privilege escalation . While the specific root cause or affected version numbers are not detailed in the provided documents, the vulnerability carries a Hi...

CVE-2026-83700

A Use after free vulnerability exists in the Windows Now Playing Session Manager . This flaw allows an authorized attacker to perform a local elevation of privilege . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-83707

A Use after free vulnerability exists in Windows Event Tracing . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high CVSS 3.1 base score of 7.0, impacting confidentiality, integrity, and availability. Official remediation is ...