CVE-2026-83884

An out-of-bounds read vulnerability exists in the HID Parser Library on Windows. This flaw allows an authorized attacker to perform a local information disclosure . No specific exploit details or information regarding in-the-wild exploitation are provided in the documents.

CVE-2026-83877

An integer overflow or wraparound vulnerability exists in the HID Parser Library , affecting Windows Devices . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability is confirmed with a CVSS3.1 base score of 7.8 , the provided documents do not speci...

CVE-2026-83857

A use after free vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-121 (Stack-based Buffer Overflow) . Details regarding specific affected v...

CVE-2026-83859

A Use after free vulnerability in Windows NTFS allows an authorized attacker to perform a local privilege elevation . The vulnerability is associated with CWE-416 and has been assigned a CVSS 3.1 base score of 7.8 (High). Specific details regarding the affected component, root cause, or remediati...

CVE-2026-83863

A heap-based buffer overflow vulnerability exists in Servicing Stack Updates . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-122 and has a CVSS 3.1 base score of 7.8 (High) . No specific information regarding exploitatio...

CVE-2026-83850

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege elevation . The vulnerability is classified with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild exploitatio...

CVE-2026-83883

A use after free vulnerability exists in Windows Win32K , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a HIGH base severity score of 7.8. No specific exploit details or proof-of-concept code are provided in the documents. Remediat...

CVE-2026-83881

A Heap-based buffer overflow exists in the Windows exFAT File System , which could allow an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 score of 7.8. No specific exploit information or version-specific details are provided in the do...

CVE-2026-83861

A heap-based buffer overflow exists in the Windows Remote Desktop Protocol . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation instructions are provided in the documents beyond the mention of an official fix .

CVE-2026-83841

A race condition vulnerability exists in Windows Win32K due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has an official fix available, but no specific exploit detail...

CVE-2026-83840

A weak authentication vulnerability in Windows Error Reporting allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-1390 . While the CVSS v3.1 score is 7.8 (High) , the documents do not provide specific software versions, root cause detail...

CVE-2026-83845

Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally. The vulnerability is associated with CWE-290 (Authentication Bypass by Spoofing). According to the CVSS 3.1 metrics, the flaw has a High severity score of 8.4, affecting Conf...

CVE-2026-83794

The Windows Portable Device MTP Driver contains an out-of-bounds read vulnerability. This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. The vulnerability is associated with CWE-125 . While the risk is classified as MEDIUM , the...

CVE-2026-83835

A buffer over-read vulnerability exists in the Windows Common Log File System Driver . This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is associated with CWE-126 and CWE-497 . No specific exploit information or remediation details ...

CVE-2026-83837

A vulnerability in Windows Kernel-Mode Drivers exists due to improper access control . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-441 (Unintended Proxy or Intermediary). While the documentation confirms the high sever...

CVE-2026-83830

A heap-based buffer overflow exists in the Windows COM+ Event System Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific details regarding the root cause, affected versions, or available exploits are provided in the documents. Remediation...

CVE-2026-83829

A heap-based buffer overflow exists in the Microsoft Windows Search Component . This vulnerability allows an authorized attacker to achieve local privilege escalation . The impact includes potential high levels of confidentiality, integrity, and availability loss. No specific exploit code or in-t...

CVE-2026-83785

A Use after free vulnerability exists in the Windows COM+ Event System Service . This flaw allows an authorized attacker to achieve local privilege escalation . No specific software versions or exploit links are provided in the documents; however, a remediation level of OFFICIAL_FIX is indicated.

CVE-2026-83786

A vulnerability in Windows NTFS allows an authorized attacker to disclose sensitive information locally through the generation of error messages. This issue is classified as an information disclosure vulnerability (CWE-209) with a Medium base severity score. While the vulnerability allows for loc...

CVE-2026-83790

A Use after free vulnerability in Windows Hello allows an authorized attacker to achieve local privilege escalation . The issue is classified with a High base severity score of 7.0. While specific technical component details or exploit links are not provided in the documents, the vulnerability is...