CVE-2026-83718

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege escalation . The vulnerability results in high impact regarding confidentiality, integrity, and availability. Official remediation is available via Microsoft. No specific exploit code or i...

CVE-2026-83717

A Use after free vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to achieve local privilege escalation . Exploitation details are not provided in the documents. Remediation is available via an official fix .

CVE-2026-83716

A heap-based buffer overflow vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to achieve local code execution . While the specific component or file causing the overflow is not detailed in the provided documents, the vulnerability has a HIGH base severity score of...

CVE-2026-83732

A Use after free vulnerability exists in the Windows Win32K component. This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploitation details or patch versions are provided in the documents.

CVE-2026-83724

A heap-based buffer overflow exists in Windows Management Instrumentation , which allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) . No specific exploit details, exploit links, or specific software versions are provided...

CVE-2026-83721

A Use after free vulnerability exists in Windows Win32K (CVE-2026-83721). This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a CVSS v3.1 base score of 7.8 (High) . No specific exploit details or mitigation steps are provided in the ...

CVE-2026-83728

A vulnerability in Windows Hyper-V arises from the improper validation of syntactic correctness of input . This flaw allows an authorized attacker to perform spoofing locally . The severity is rated as HIGH with a CVSS base score of 8.8. While the vulnerability is confirmed, specific details rega...

CVE-2026-83697

A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Modern Device Management (MDM) . This vulnerability allows an authorized attacker to perform tampering locally . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-83714

A use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-908 . While the specific technical root cause is not detailed beyond the uninitialized resource, the impact is categorized as a hi...

CVE-2026-83709

A heap-based buffer overflow vulnerability exists in Windows NTLM . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability's technical impact is high regarding confidentiality, integrity, and availability, the documents do not provide specific explo...

CVE-2026-83698

A heap-based buffer overflow exists in the Windows Client-Side Caching (CSC) Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit information or in-the-wild exploitation details are provided in the documents. Remediation involves a...

CVE-2026-83696

A Use after free vulnerability exists in the Windows Cloud Files Mini Filter Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.0 (High) . No specific exploitation details or patch versions are provided in the docum...

CVE-2026-83702

A Use after free vulnerability exists in Windows Installer , which allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.0 (High), with impact across confidentiality, integrity, and availability. Official remediation is available via Microsoft.

CVE-2026-83701

A Use after free vulnerability exists in the Windows Now Playing Session Manager . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is indicated as an OFFI...

CVE-2026-83689

A Use after free vulnerability exists in Windows Error Reporting . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with high impact on confidentiality, integrity, and availability. Remediation is available via an official fix from...

CVE-2026-83686

The Microsoft Windows Search Component is susceptible to an out-of-bounds read vulnerability. This flaw allows an authorized attacker to disclose information locally. The severity is rated as MEDIUM with a CVSS 3.1 score of 5.5, characterized by a high confidentiality impact and low attack comple...

CVE-2026-83672

A vulnerability in Windows Installer allows an authorized attacker to disclose sensitive system information locally. This flaw is categorized as an exposure of sensitive system information to an unauthorized control sphere (CWE-497). While the CVSS 3.1 score of 4.7 (Medium) reflects a high confid...

CVE-2026-83682

A Use after free vulnerability exists in the Windows TCP/IP stack. This flaw allows an authorized attacker to achieve local privilege escalation . No specific technical details regarding the underlying component or internal function are provided, and no exploit information or specific patch versi...

CVE-2026-83680

A heap-based buffer overflow vulnerability exists in Windows Installer . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 (HIGH) . While the technical root cause is identified as a heap overflow, no specific exploit ...

CVE-2026-83679

A Use after free vulnerability exists in the Windows Defender Firewall Service . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 and carries a CVSS 3.1 base score of 7.8 . No specific exploit information or detailed remed...