CVE-2026-83842

A double free vulnerability exists within the Windows TCP/IP stack. This flaw allows an authorized attacker to achieve local privilege escalation . Exploitation details and specific affected versions are not provided in the documents. Remediation involves applying the official fix from Microsoft.

CVE-2026-83836

A Heap-based buffer overflow exists in Windows Event Tracing which could allow an unauthorized attacker to execute code locally . The vulnerability involves a CWE-122 (Heap-based Buffer Overflow) and CWE-191 (Integer Underflow) condition. The Base Severity is High (7.8), with the attack vector be...

CVE-2026-83834

A Use after free vulnerability exists in Windows Kernel-Mode Drivers . This flaw allows an authorized attacker to perform a local elevation of privilege . The vulnerability is associated with CWE-416 (Use After Free) and CWE-367 (Time-of-check Time-of-use Race Condition). No specific exploit deta...

CVE-2026-83849

An out-of-bounds read vulnerability exists in Windows Hello , which allows an authorized attacker to disclose information locally . The vulnerability's confidentiality impact is rated as high, while integrity and availability are unaffected. No specific exploit code or in-the-wild exploitation de...

CVE-2026-83848

A vulnerability exists in the Windows COM+ Event System Service due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or versions are provided in the documents, though the issue is confirmed with a HIG...

CVE-2026-83833

A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability impacts the core kernel component of the Windows operating system. Specific details regarding the underlying cause, affected versions, or ...

CVE-2026-83828

A heap-based buffer overflow exists in the Windows MIDI Service Module , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). No specific exploit details ...

CVE-2026-83827

A heap-based buffer overflow vulnerability exists in the Windows Bluetooth Port Driver . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is confirmed with a CVSS 3.1 score of 7.0, indicating a high severity impact on confidentiality, integrity, and...

CVE-2026-83798

The Windows Update Stack is vulnerable to a flaw involving the improper verification of cryptographic signatures . This vulnerability allows an authorized attacker to perform spoofing locally . The issue is associated with CWE-347 (Improper Verification of Cryptographic Signature) and CWE-20 (Imp...

CVE-2026-83787

The Windows DHCP Server is affected by a vulnerability involving insufficient verification of data authenticity . This flaw allows an authorized attacker to perform a local security feature bypass . The vulnerability is associated with CWE-288 (Authentication Bypass Using an Alternate Path or Cha...

CVE-2026-83796

A Use after free vulnerability in the Windows Kernel allows an authorized attacker to perform a local privilege escalation . The vulnerability is characterized by a high severity score of 7.8 (CVSS v3.1). While the technical root cause is identified as a use after free, specific details regarding...

CVE-2026-83793

A vulnerability in the Windows Update Orchestrator Service involves improper link resolution before file access (link following). This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability loss. N...

CVE-2026-83832

An out-of-bounds read vulnerability exists in Windows Spaceport.sys . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.8 (HIGH) , with impacts affecting confidentiality, integrity, and availability. Remediation is avai...

CVE-2026-83826

A vulnerability exists in Windows Error Reporting due to an untrusted pointer dereference . This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 base score is 7.8 (High) , reflecting high impacts on confidentiality, integrity, and availability. While the ...

CVE-2026-83753

A heap-based buffer overflow exists in the Windows Camera Frame Server Monitor . This vulnerability allows an authorized attacker to perform a local privilege escalation . No specific exploitation details or direct links to exploit code are provided in the documents, though an official fix is ind...

CVE-2026-83768

A heap-based buffer overflow exists in the Windows Kernel , which allows an authorized attacker to achieve local privilege escalation . No specific component, version, or remediation details are provided in the documents beyond the official fix status indicated in the metrics. Exploitation detail...

CVE-2026-83761

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed with a CVSS 3.1 base score of 7.8 (High) , specific exploit details and in-the-wild exploitation infor...

CVE-2026-83760

An out-of-bounds read vulnerability exists in the Microsoft Bluetooth Driver . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside the intended memory boundaries. The vulnerability has a MEDIUM severity rating with a CVSS 3.1 score of 5.5, pri...

CVE-2026-83779

A heap-based buffer overflow exists in Windows Installer , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by the CVSS 3.1 score of 7.8, indicating high severity. While the specific root cause or affected version is not detailed i...

CVE-2026-83758

A heap-based buffer overflow exists in Windows Error Reporting . This vulnerability allows an authorized attacker to achieve local code execution . Remediation is available via an official fix from Microsoft.