CVE-2026-83668

An out-of-bounds read vulnerability exists in the Windows WLAN Service . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of intended memory boundaries. The official CVSS 3.1 score is 5.5 (Medium) , indicating a local attack vector with low...

CVE-2026-83672

A vulnerability in Windows Installer allows an authorized attacker to disclose sensitive system information locally. This flaw is categorized as an exposure of sensitive system information to an unauthorized control sphere (CWE-497). While the CVSS 3.1 score of 4.7 (Medium) reflects a high confid...

CVE-2026-83637

An out-of-bounds read vulnerability exists in Windows Kernel-Mode Drivers . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a HIGH severity score of 7.8. No specific exploit details or in-the-wild exploitation information are provided ...

CVE-2026-83639

A heap-based buffer overflow vulnerability exists in the Windows Sensor Data Service . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS 3.1 score of 7.8 indicates a high severity, specific exploitation details or in-the-wild occurrences are not provid...

CVE-2026-83636

A null pointer dereference vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to perform a local denial of service (DoS) attack. While the documents confirm the impact on availability, no specific component, file, or version details are provided. No exploits are cur...

CVE-2026-83638

A heap-based buffer overflow exists in the Windows USB Driver . This vulnerability allows an authorized attacker to perform a local privilege elevation . No specific versions are listed as affected, and no exploit details or proof-of-concept code are provided in the documents. Remediation involve...

CVE-2026-83656

A missing authentication vulnerability exists in the Windows Modern Device Management (MDM) component. This flaw allows an authorized attacker to perform tampering locally by accessing a critical function without proper authentication. The CVSS 3.1 score is 4.7 (Medium) , indicating a local attac...

CVE-2026-83664

The Windows Portable Device File System Driver is vulnerable to a type confusion issue (CWE-843). This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit details or in-the-wild exploitation instances are provided...

CVE-2026-83634

A double free vulnerability in Windows BitLocker allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-415 . While the specific component or file is not detailed in the provided documents, the impact involves high consequences for confidenti...

CVE-2026-83640

A heap-based buffer overflow exists in Windows NTFS that allows an authorized attacker to achieve local code execution . The vulnerability is rated with a High severity (CVSS 3.1 score of 7.8). No specific exploit details or in-the-wild exploitation information are provided in the documents. Reme...

CVE-2026-83567

A vulnerability exists in Windows NTFS where an out-of-bounds read (CWE-125) allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.8 (High) . While the documents confirm the existence of an official fix , no specific patch versions or wo...

CVE-2026-83579

A heap-based buffer overflow exists in the Windows Smart Card component. This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific software versions, root causes, or exploit details are provided in the documents, but an official fix is indicated by the r...

CVE-2026-83568

A vulnerability in Windows Kernel-Mode Drivers involves improper access control , which allows an authorized attacker to achieve local privilege elevation . The issue is associated with CWE-862 (Missing Authorization) . No specific exploit details, affected versions, or remediation instructions a...

CVE-2026-83587

A vulnerability exists in Windows Core Messaging due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . No specific version numbers or exploitation details are provided in the documentation, but an official fix is noted as the rem...

CVE-2026-83585

The Windows NTFS file system is vulnerable to a local privilege escalation flaw caused by the use of externally-controlled format strings (CWE-134). An authorized attacker can exploit this issue to elevate their privileges on the local system. No specific exploit links or in-the-wild exploitation...

CVE-2026-83566

A Use after free vulnerability exists in Windows Win32K - ICOMP , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is assigned a High severity base score of 7.0. While the root cause is identified as a Use after free, specific technical details regardin...

CVE-2026-83582

A Use after free vulnerability exists in the Windows Graphics Kernel . This flaw allows an authorized attacker to perform a local information disclosure attack. The impact is categorized as a high confidentiality risk with a CVSS 3.1 base score of 4.7 . While the specific component or file within...

CVE-2026-83588

A heap-based buffer overflow exists in the Windows USB Driver . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit details or in-the-wild exploitation information are provided in the documents.

CVE-2026-83570

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . While the CVSS v3.1 score of 7.8 indicates a high severity with high impact on confidentiality, integrity, and availability, specific e...

CVE-2026-83574

A Use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability impacts the Windows Search Service and has a CVSS 3.1 base score of 7.0. No specific exploit details or manual workar...