CVE-2026-83791

The Windows Virtual Input component is susceptible to an improper authorization vulnerability (CWE-283), which allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated with a CVSS v3.1 score of 7.8 (High). No specific exploit details or remediation versions...

CVE-2026-83790

A Use after free vulnerability in Windows Hello allows an authorized attacker to achieve local privilege escalation . The issue is classified with a High base severity score of 7.0. While specific technical component details or exploit links are not provided in the documents, the vulnerability is...

CVE-2026-83781

The Windows Program Compatibility Assistant Service is vulnerable to an improper null termination (CWE-170) flaw. This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific versions or exploit details are provided in the documents; however, a remediation ...

CVE-2026-83774

A vulnerability in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose sensitive system information locally. The root cause is the exposure of this information to an unauthorized control sphere (CWE-497). The impact is a high level of confidentiality loss, though integrit...

CVE-2026-83765

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on confidentiality. No specific exploit information or remediation details are p...

CVE-2026-83764

A vulnerability in the Windows Clipboard User Service stems from incorrect authorization , which allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5, reflecting a MEDIUM severity with HIGH confidentiality impact. No specific exploit information or r...

CVE-2026-83757

A heap-based buffer overflow exists in the Windows Win32K component. This vulnerability allows an authorized attacker to achieve local privilege escalation . The official remediation is an OFFICIAL_FIX provided by Microsoft. No specific exploit code or in-the-wild exploitation details are provide...

CVE-2026-83763

A type confusion vulnerability in the Windows Input System allows an authorized attacker to achieve local privilege elevation . The root cause involves the access of a resource using an incompatible type. While specific affected versions are not detailed in the provided documents, remediation is ...

CVE-2026-83762

A Use after free vulnerability exists in Windows Win32K (CWE-416), which allows an authorized attacker to perform local privilege escalation . The impact is classified as HIGH , potentially affecting confidentiality, integrity, and availability. Remediation is available through an official fix pr...

CVE-2026-83773

The Windows MIDI Service Module is vulnerable to an information disclosure flaw (CWE-497). This vulnerability allows an authorized attacker to disclose sensitive system information locally due to exposure to an unauthorized control sphere. No specific exploit details or patch versions are provide...

CVE-2026-83767

A stack-based buffer overflow vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local privilege escalation on affected systems. The vulnerability is characterized by a High severity base score of 7.8. No specific details regarding exploi...

CVE-2026-83756

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-83755

A vulnerability in the Windows Win32K component allows an authorized attacker to disclose information locally due to the use of uninitialized resources (CWE-908). The impact is categorized as high for confidentiality, though integrity and availability are not affected. While specific exploit deta...

CVE-2026-83747

An out-of-bounds read vulnerability exists in Windows Error Reporting . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit information or patch versions are provided in the documents beyond the confirmation ...

CVE-2026-83752

A Use after free vulnerability exists in Windows Installer which allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . While the documents confirm the existence of the flaw and its potential impact on local privileges, no specific e...

CVE-2026-83737

An out-of-bounds read vulnerability exists in the Windows NTFS file system. This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is associated with CWE-125 and has a CVSS 3.1 score of 5.5. No specific exploit details or remediation vers...

CVE-2026-83751

A Use after free vulnerability exists in the Windows MIDI Service Module . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated with a High severity base score of 7.0 . No specific exploit details or remediation steps are provided in the docum...

CVE-2026-83750

A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Error Reporting , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-367 (TOCTOU) and CWE-122 (Heap-based Buffer Overflow). The impact includes high levels ...

CVE-2026-83735

A Release of invalid pointer or reference vulnerability in the Windows Kernel allows an authorized attacker to perform a local privilege escalation . This issue is associated with CWE-763 . While the vulnerability has a high severity score, specific details regarding the affected component, preci...

CVE-2026-83720

A Use after free vulnerability in Windows Kerberos allows an authorized attacker to perform local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability loss. Remediation is available via an official fix .