CVE-2026-83783

A heap-based buffer overflow vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized as a High severity issue (CVSS 3.1 score of 7.8). Remediation is available via an official fix ...

CVE-2026-83767

A stack-based buffer overflow vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local privilege escalation on affected systems. The vulnerability is characterized by a High severity base score of 7.8. No specific details regarding exploi...

CVE-2026-83763

A type confusion vulnerability in the Windows Input System allows an authorized attacker to achieve local privilege elevation . The root cause involves the access of a resource using an incompatible type. While specific affected versions are not detailed in the provided documents, remediation is ...

CVE-2026-83764

A vulnerability in the Windows Clipboard User Service stems from incorrect authorization , which allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5, reflecting a MEDIUM severity with HIGH confidentiality impact. No specific exploit information or r...

CVE-2026-83762

A Use after free vulnerability exists in Windows Win32K (CWE-416), which allows an authorized attacker to perform local privilege escalation . The impact is classified as HIGH , potentially affecting confidentiality, integrity, and availability. Remediation is available through an official fix pr...

CVE-2026-83765

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on confidentiality. No specific exploit information or remediation details are p...

CVE-2026-83774

A vulnerability in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose sensitive system information locally. The root cause is the exposure of this information to an unauthorized control sphere (CWE-497). The impact is a high level of confidentiality loss, though integrit...

CVE-2026-83757

A heap-based buffer overflow exists in the Windows Win32K component. This vulnerability allows an authorized attacker to achieve local privilege escalation . The official remediation is an OFFICIAL_FIX provided by Microsoft. No specific exploit code or in-the-wild exploitation details are provide...

CVE-2026-83773

The Windows MIDI Service Module is vulnerable to an information disclosure flaw (CWE-497). This vulnerability allows an authorized attacker to disclose sensitive system information locally due to exposure to an unauthorized control sphere. No specific exploit details or patch versions are provide...

CVE-2026-83756

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-83751

A Use after free vulnerability exists in the Windows MIDI Service Module . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated with a High severity base score of 7.0 . No specific exploit details or remediation steps are provided in the docum...

CVE-2026-83737

An out-of-bounds read vulnerability exists in the Windows NTFS file system. This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is associated with CWE-125 and has a CVSS 3.1 score of 5.5. No specific exploit details or remediation vers...

CVE-2026-83755

A vulnerability in the Windows Win32K component allows an authorized attacker to disclose information locally due to the use of uninitialized resources (CWE-908). The impact is categorized as high for confidentiality, though integrity and availability are not affected. While specific exploit deta...

CVE-2026-83750

A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Error Reporting , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-367 (TOCTOU) and CWE-122 (Heap-based Buffer Overflow). The impact includes high levels ...

CVE-2026-83747

An out-of-bounds read vulnerability exists in Windows Error Reporting . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit information or patch versions are provided in the documents beyond the confirmation ...

CVE-2026-83735

A Release of invalid pointer or reference vulnerability in the Windows Kernel allows an authorized attacker to perform a local privilege escalation . This issue is associated with CWE-763 . While the vulnerability has a high severity score, specific details regarding the affected component, preci...

CVE-2026-83752

A Use after free vulnerability exists in Windows Installer which allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . While the documents confirm the existence of the flaw and its potential impact on local privileges, no specific e...

CVE-2026-83720

A Use after free vulnerability in Windows Kerberos allows an authorized attacker to perform local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability loss. Remediation is available via an official fix .

CVE-2026-83717

A Use after free vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to achieve local privilege escalation . Exploitation details are not provided in the documents. Remediation is available via an official fix .

CVE-2026-83724

A heap-based buffer overflow exists in Windows Management Instrumentation , which allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) . No specific exploit details, exploit links, or specific software versions are provided...