CVE-2026-83827

A heap-based buffer overflow vulnerability exists in the Windows Bluetooth Port Driver . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is confirmed with a CVSS 3.1 score of 7.0, indicating a high severity impact on confidentiality, integrity, and...

CVE-2026-83775

A race condition vulnerability exists in Windows Installer due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-362 (Race Condition) and CWE-122 (H...

CVE-2026-83761

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed with a CVSS 3.1 base score of 7.8 (High) , specific exploit details and in-the-wild exploitation infor...

CVE-2026-83760

An out-of-bounds read vulnerability exists in the Microsoft Bluetooth Driver . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside the intended memory boundaries. The vulnerability has a MEDIUM severity rating with a CVSS 3.1 score of 5.5, pri...

CVE-2026-83753

A heap-based buffer overflow exists in the Windows Camera Frame Server Monitor . This vulnerability allows an authorized attacker to perform a local privilege escalation . No specific exploitation details or direct links to exploit code are provided in the documents, though an official fix is ind...

CVE-2026-83768

A heap-based buffer overflow exists in the Windows Kernel , which allows an authorized attacker to achieve local privilege escalation . No specific component, version, or remediation details are provided in the documents beyond the official fix status indicated in the metrics. Exploitation detail...

CVE-2026-83758

A heap-based buffer overflow exists in Windows Error Reporting . This vulnerability allows an authorized attacker to achieve local code execution . Remediation is available via an official fix from Microsoft.

CVE-2026-83779

A heap-based buffer overflow exists in Windows Installer , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by the CVSS 3.1 score of 7.8, indicating high severity. While the specific root cause or affected version is not detailed i...

CVE-2026-83715

The Windows Error Reporting service is vulnerable to a Missing Authentication for Critical Function (CWE-306) flaw. This vulnerability allows an authorized attacker to perform tampering locally on the affected system. The CVSS 3.1 base score is 7.1 (High) , with local access and low complexity re...

CVE-2026-83722

A Use after free vulnerability exists in the Microsoft Local Security Authority Server (lsasrv) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). While the documentation con...

CVE-2026-83749

A Use after free vulnerability exists in the Windows Overlay Filter , which allows an authorized attacker to achieve local privilege elevation . This vulnerability is identified as CVE-2026-83749 and has a CVSS 3.1 base score of 7.0 . Exploitation details and specific affected versions are not pr...

CVE-2026-83712

Windows NTFS is affected by an out-of-bounds write vulnerability. This flaw allows an authorized attacker to achieve local code execution . No specific affected versions, root causes, or remediation steps are provided in the documents. Exploitation details are not present.

CVE-2026-83738

A Use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or exploitation links are provided in the documents. Remediation involves applying the official ...

CVE-2026-83726

A Use after free vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to achieve local privilege escalation . While the technical root cause is identified as a use after free (CWE-416), specific details regarding affected versions or manual workarounds ar...

CVE-2026-83719

A buffer over-read vulnerability exists in Servicing Stack Updates , which allows an authorized attacker to disclose information locally . The vulnerability is associated with a MEDIUM severity rating (CVSS 3.1: 5.5) and is characterized by a LOCAL attack vector with LOW complexity. No specific e...

CVE-2026-83713

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to disclose information locally. The vulnerability is categorized under CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control ...

CVE-2026-83727

A buffer over-read vulnerability exists in the Windows Overlay Filter component. This flaw allows an authorized attacker to achieve local privilege escalation . While the impact is categorized as High with potential effects on confidentiality, integrity, and availability, specific exploit details...

CVE-2026-83723

A use of uninitialized resource vulnerability in the Windows Event Logging Service allows an authorized attacker to disclose information locally. The vulnerability is associated with CWE-908 and has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit details or information regarding parti...

CVE-2026-83705

A vulnerability in Windows HTTP.sys allows an authorized attacker to disclose sensitive system information locally. This issue is categorized as an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). The vulnerability has a Medium severity (CVSS 3.1 score of 5.5)...

CVE-2026-83707

A Use after free vulnerability exists in Windows Event Tracing . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high CVSS 3.1 base score of 7.0, impacting confidentiality, integrity, and availability. Official remediation is ...