CVE-2026-83715

The Windows Error Reporting service is vulnerable to a Missing Authentication for Critical Function (CWE-306) flaw. This vulnerability allows an authorized attacker to perform tampering locally on the affected system. The CVSS 3.1 base score is 7.1 (High) , with local access and low complexity re...

CVE-2026-83722

A Use after free vulnerability exists in the Microsoft Local Security Authority Server (lsasrv) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 (Use After Free) and CWE-362 (Race Condition). While the documentation con...

CVE-2026-83749

A Use after free vulnerability exists in the Windows Overlay Filter , which allows an authorized attacker to achieve local privilege elevation . This vulnerability is identified as CVE-2026-83749 and has a CVSS 3.1 base score of 7.0 . Exploitation details and specific affected versions are not pr...

CVE-2026-83738

A Use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or exploitation links are provided in the documents. Remediation involves applying the official ...

CVE-2026-83726

A Use after free vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to achieve local privilege escalation . While the technical root cause is identified as a use after free (CWE-416), specific details regarding affected versions or manual workarounds ar...

CVE-2026-83713

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to disclose information locally. The vulnerability is categorized under CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control ...

CVE-2026-83723

A use of uninitialized resource vulnerability in the Windows Event Logging Service allows an authorized attacker to disclose information locally. The vulnerability is associated with CWE-908 and has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit details or information regarding parti...

CVE-2026-83719

A buffer over-read vulnerability exists in Servicing Stack Updates , which allows an authorized attacker to disclose information locally . The vulnerability is associated with a MEDIUM severity rating (CVSS 3.1: 5.5) and is characterized by a LOCAL attack vector with LOW complexity. No specific e...

CVE-2026-83700

A Use after free vulnerability exists in the Windows Now Playing Session Manager . This flaw allows an authorized attacker to perform a local elevation of privilege . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-83705

A vulnerability in Windows HTTP.sys allows an authorized attacker to disclose sensitive system information locally. This issue is categorized as an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497). The vulnerability has a Medium severity (CVSS 3.1 score of 5.5)...

CVE-2026-83707

A Use after free vulnerability exists in Windows Event Tracing . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by a high CVSS 3.1 base score of 7.0, impacting confidentiality, integrity, and availability. Official remediation is ...

CVE-2026-83690

A Use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to achieve local privilege elevation . While the specific component or file is not identified in the provided documents, the vulnerability is confirmed to have a HIGH base severity (CVSS 3.1: 7.8...

CVE-2026-83699

A stack-based buffer overflow exists in the Windows Client-Side Caching (CSC) Service . This vulnerability allows an authorized attacker to perform a local privilege escalation . Exploitation details and specific exploit links are not provided in the documents.

CVE-2026-83706

A Use after free vulnerability exists in the Windows NTFS file system. This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed with a CVSSv3.1 score of 6.7 (Medium), specific details regarding the affected component, root cause, or avai...

CVE-2026-83691

A heap-based buffer overflow exists in the Windows DHCP Server component. This vulnerability allows an authorized attacker to perform a local privilege escalation . While the specific root cause or affected version numbers are not detailed in the provided documents, the vulnerability carries a Hi...

CVE-2026-83692

A heap-based buffer overflow exists in the Windows Bind Filter Driver . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-83694

An out-of-bounds read vulnerability exists in the Windows Volume Manager Extension Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a CVSS 3.1 base score of 7.0 (High) . Remediation involves applying the official fix pro...

CVE-2026-83708

A stack-based buffer overflow exists in Windows Installer , which allows an authorized attacker to achieve local privilege escalation . While the vulnerability's root cause is identified as a buffer overflow (CWE-121), specific affected versions and exploit links are not provided in the documents...

CVE-2026-83678

A Heap-based buffer overflow exists in Windows TCP/IP , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.8 (High) . No specific exploit information or remediation details are provided in the documents b...

CVE-2026-83681

A weak authentication vulnerability in Microsoft PowerToys allows an authorized attacker to perform tampering locally . The vulnerability is associated with CWE-1390 and has a CVSS 3.1 base score of 5.5 (Medium) . While the specific underlying component or file is not detailed in the provided doc...