CVE-2026-83932

A heap-based buffer overflow exists in Windows Group Policy , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is categorized as High severity (CVSS 3.1 score of 7.8) due to its potential impact on confidentiality, integrity, and availability. No ...

CVE-2026-84009

A Time-of-check time-of-use (TOCTOU) race condition exists in the Windows Projected File System . This vulnerability allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-367 . No specific exploit details or remediation steps are provided in the doc...

CVE-2026-84013

A use after free vulnerability exists in the Windows Telephony Server component. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.8. No specific exploit links or detailed remediation steps are provided i...

CVE-2026-84011

The Windows SMB Client is susceptible to an incorrect authorization vulnerability (CWE-863) that allows an authorized attacker to bypass a security feature locally. The vulnerability results in a high integrity impact but no impact on confidentiality or availability. Remediation is provided via a...

CVE-2026-83927

The Windows Registry is susceptible to an improper link resolution before file access (link following) vulnerability. This security flaw allows an authorized attacker to achieve local privilege escalation . While the specific affected versions and technical root causes are not detailed beyond the...

CVE-2026-83928

An out-of-bounds write vulnerability exists in the Windows Local Security Authority Subsystem Service (LSASS) . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability has a HIGH base severity score of 8.8. No specific exploit details or direct...

CVE-2026-84014

A Heap-based buffer overflow exists in the Windows Device Association Service . This vulnerability allows an authorized attacker to achieve local privilege elevation . The issue is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-362 (Race Condition). No specific exploit links or deta...

CVE-2026-83916

A double free vulnerability in Windows Error Reporting allows an authorized attacker to achieve local code execution . The vulnerability is characterized by a CWE-415 flaw, which can lead to significant impacts on confidentiality, integrity, and availability . An official fix is available, and sp...

CVE-2026-83922

A Use after free vulnerability exists in Windows Direct Composition . This flaw allows an authorized attacker to achieve local privilege escalation . No specific software versions, exploit details, or remediation steps are provided in the documents.

CVE-2026-83919

A heap-based buffer overflow exists in the Microsoft Internet Messaging API . This vulnerability allows an authorized attacker to achieve local code execution . No specific versions are listed as affected, and no exploit information is provided in the documents. Remediation is indicated as an off...

CVE-2026-83921

A heap-based buffer overflow exists in the Microsoft Windows Search Component (Windows Search Service). This vulnerability allows an authorized attacker to achieve local privilege escalation . While the technical root cause is identified as a heap-based buffer overflow, specific exploit details o...

CVE-2026-83926

A security vulnerability in Windows Hello was identified involving improper certificate validation (CWE-295). This flaw allows an authorized attacker to bypass a security feature locally. The vulnerability carries a Medium severity rating with a CVSS 3.1 score of 4.4. No specific exploit details ...

CVE-2026-83920

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific versions, exploit details, or remediation steps are provided in the documents beyond the existence of an official fix.

CVE-2026-83586

The Windows Resilient File System (ReFS) Deduplication Service is vulnerable to weak authentication (CWE-1390), which allows an authorized attacker to perform a local privilege elevation . The impact includes high risks to confidentiality, integrity, and availability. An official fix is available...

CVE-2026-83769

A Use after free vulnerability exists in OpenSSH for Windows , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a CVSS 3.1 base score of 7.8 , indicating a high severity. No specific exploit details or in-the-wild exploitation record...

CVE-2026-83741

A Use after free vulnerability in Internet Explorer allows an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a CVSS 3.1 base score of 7.8 and is categorized under CWE-416 . No specific exploit details or specific component files are provided in th...

CVE-2026-83912

A Use after free vulnerability in Windows Direct Composition allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 . While the impact involves high levels of confidentiality, integrity, and availability, specific technical details regard...

CVE-2026-83886

A Use after free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to achieve local privilege elevation . While the specific technical root cause is not detailed in the provided documents, the impact includes high levels of confidentiality, ...

CVE-2026-83911

A heap-based buffer overflow exists in Windows Storage which can be leveraged by an authorized attacker to achieve local privilege elevation . The vulnerability is classified as High severity with a CVSS 3.1 score of 7.0. No specific exploit details or in-the-wild exploitation information are pro...

CVE-2026-83871

A Heap-based buffer overflow exists in OpenSSH for Windows , which allows an authorized attacker to achieve local privilege elevation . The vulnerability involves a Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) and a Heap-based Buffer Overflow (CWE-122). The CVSS 3.1 base score is 7...