CVE-2026-83901

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score of 7.0 (High) reflects high impact on confidentiality, integrity, and availability. No specific exploit code or direct l...

CVE-2026-70086

A use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.0 . Remediation is available via an official fix provided by Microsoft.

CVE-2026-83867

A heap-based buffer overflow vulnerability exists in Windows Push Notifications . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score of 7.8 indicates a High severity, with high impact on confidentiality, integrity, and availability. No specific explo...

CVE-2026-83875

A vulnerability exists in the HID Parser Library where an out-of-bounds read occurs. This flaw allows an authorized attacker to disclose information locally . The impact is categorized as a high confidentiality loss. No specific exploit information or remediation details are provided in the docum...

CVE-2026-83852

A Use after free vulnerability exists in the Windows Bind Filter Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High base severity score of 7.0. No specific exploit details or specific affected versions are provided in the ...

CVE-2026-83866

A Use after free vulnerability exists in Windows Win32K , which allows an authorized attacker to achieve local privilege escalation . While specific impacted versions are not detailed in the provided documents, the vulnerability is categorized as a high-severity issue. No specific exploit links o...

CVE-2026-83853

A Use after free vulnerability exists in Windows Hello , which allows an authorized attacker to achieve local privilege escalation . The impact is classified as high regarding confidentiality, integrity, and availability. No specific exploit details or in-the-wild exploitation information are pro...

CVE-2026-83872

A vulnerability exists in Windows TCP/IP due to an incorrect conversion between numeric types (CWE-681). This flaw allows an authorized attacker to perform a local elevation of privilege . The impact includes high severity for confidentiality, integrity, and availability. No specific exploit deta...

CVE-2026-83876

A Use after free vulnerability in Windows Shell allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized as having a high severity with a CVSS 3.1 score of 7.8 . No specific versions, root causes, or exploit details are provided in the documents. Rem...

CVE-2026-83865

A Relative path traversal vulnerability exists in the Windows Internet (wininet.dll) component. This flaw allows an authorized attacker to perform tampering locally on the affected system. The vulnerability is associated with CWE-23 . No specific exploit information or in-the-wild exploitation de...

CVE-2026-83864

The Windows NTFS file system contains an improper access control vulnerability. This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. While the vulnerability is confirmed, the provided documents do not specify the exact component,...

CVE-2026-83846

A Use after free vulnerability exists in the Connected Devices Platform Service (Cdpsvc) . This flaw allows an authorized attacker to achieve local privilege escalation . No specific technical root cause details, affected versions, or exploit links are provided in the documents. Remediation infor...

CVE-2026-83847

A Heap-based buffer overflow and Integer Overflow (CWE-122, CWE-190) exist in Microsoft Account , which may allow an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.8 (High) . Specific exploitation details or proof-of-concept code are no...

CVE-2026-83836

A Heap-based buffer overflow exists in Windows Event Tracing which could allow an unauthorized attacker to execute code locally . The vulnerability involves a CWE-122 (Heap-based Buffer Overflow) and CWE-191 (Integer Underflow) condition. The Base Severity is High (7.8), with the attack vector be...

CVE-2026-83834

A Use after free vulnerability exists in Windows Kernel-Mode Drivers . This flaw allows an authorized attacker to perform a local elevation of privilege . The vulnerability is associated with CWE-416 (Use After Free) and CWE-367 (Time-of-check Time-of-use Race Condition). No specific exploit deta...

CVE-2026-83848

A vulnerability exists in the Windows COM+ Event System Service due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or versions are provided in the documents, though the issue is confirmed with a HIG...

CVE-2026-83849

An out-of-bounds read vulnerability exists in Windows Hello , which allows an authorized attacker to disclose information locally . The vulnerability's confidentiality impact is rated as high, while integrity and availability are unaffected. No specific exploit code or in-the-wild exploitation de...

CVE-2026-83839

A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Hyper-V . This vulnerability allows an authorized attacker to perform a local privilege escalation . No specific affected versions, root cause components, or remediation steps are provided in the documentation. Exploitation det...

CVE-2026-83842

A double free vulnerability exists within the Windows TCP/IP stack. This flaw allows an authorized attacker to achieve local privilege escalation . Exploitation details and specific affected versions are not provided in the documents. Remediation involves applying the official fix from Microsoft.

CVE-2026-83833

A heap-based buffer overflow exists in the Windows Kernel , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability impacts the core kernel component of the Windows operating system. Specific details regarding the underlying cause, affected versions, or ...