CVE-2026-83835

A buffer over-read vulnerability exists in the Windows Common Log File System Driver . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is associated with CWE-126 and CWE-497 . No specific exploit information or remediation details ...

CVE-2026-83830

A heap-based buffer overflow exists in the Windows COM+ Event System Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific details regarding the root cause, affected versions, or available exploits are provided in the documents. Remediation...

CVE-2026-83837

A vulnerability in Windows Kernel-Mode Drivers exists due to improper access control . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-441 (Unintended Proxy or Intermediary). While the documentation confirms the high sever...

CVE-2026-83829

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege escalation . The impact includes potential high levels of confidentiality, integrity, and availability loss. No specific exploit code or in-t...

CVE-2026-83794

The Windows Portable Device MTP Driver contains an out-of-bounds read vulnerability. This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability is associated with CWE-125 . While the risk is classified as MEDIUM , the...

CVE-2026-83790

A Use after free vulnerability in Windows Hello allows an authorized attacker to achieve local privilege escalation . The issue is classified with a High base severity score of 7.0. While specific technical component details or exploit links are not provided in the documents, the vulnerability is...

CVE-2026-83791

The Windows Virtual Input component is susceptible to an improper authorization vulnerability (CWE-283), which allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated with a CVSS v3.1 score of 7.8 (High). No specific exploit details or remediation versions...

CVE-2026-83792

An incorrect authorization flaw exists in the Windows Device Install Service , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-863 and has been assigned a high severity score of 7.8. While the specific root cause and affected ver...

CVE-2026-83781

The Windows Program Compatibility Assistant Service is vulnerable to an improper null termination (CWE-170) flaw. This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific versions or exploit details are provided in the documents; however, a remediation ...

CVE-2026-83783

A heap-based buffer overflow vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized as a High severity issue (CVSS 3.1 score of 7.8). Remediation is available via an official fix ...

CVE-2026-83786

A vulnerability in Windows NTFS allows an authorized attacker to disclose sensitive information locally through the generation of error messages. This issue is classified as an information disclosure vulnerability (CWE-209) with a Medium base severity score. While the vulnerability allows for loc...

CVE-2026-83785

A Use after free vulnerability exists in the Windows COM+ Event System Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific software versions or exploit links are provided in the documents; however, a remediation level of OFFICIAL_FIX is indicated.

CVE-2026-83762

A Use after free vulnerability exists in Windows Win32K (CWE-416), which allows an authorized attacker to perform local privilege escalation . The impact is classified as HIGH , potentially affecting confidentiality, integrity, and availability. Remediation is available through an official fix pr...

CVE-2026-83757

A heap-based buffer overflow exists in the Windows Win32K component. This vulnerability allows an authorized attacker to achieve local privilege escalation . The official remediation is an OFFICIAL_FIX provided by Microsoft. No specific exploit code or in-the-wild exploitation details are provide...

CVE-2026-83763

A type confusion vulnerability in the Windows Input System allows an authorized attacker to achieve local privilege elevation . The root cause involves the access of a resource using an incompatible type. While specific affected versions are not detailed in the provided documents, remediation is ...

CVE-2026-83767

A stack-based buffer overflow vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local privilege escalation on affected systems. The vulnerability is characterized by a High severity base score of 7.8. No specific details regarding exploi...

CVE-2026-83764

A vulnerability in the Windows Clipboard User Service stems from incorrect authorization , which allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5, reflecting a MEDIUM severity with HIGH confidentiality impact. No specific exploit information or r...

CVE-2026-83765

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on confidentiality. No specific exploit information or remediation details are p...

CVE-2026-83774

A vulnerability in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose sensitive system information locally. The root cause is the exposure of this information to an unauthorized control sphere (CWE-497). The impact is a high level of confidentiality loss, though integrit...

CVE-2026-83773

The Windows MIDI Service Module is vulnerable to an information disclosure flaw (CWE-497). This vulnerability allows an authorized attacker to disclose sensitive system information locally due to exposure to an unauthorized control sphere. No specific exploit details or patch versions are provide...