CVE-2026-83792

An incorrect authorization flaw exists in the Windows Device Install Service , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-863 and has been assigned a high severity score of 7.8. While the specific root cause and affected ver...

CVE-2026-83783

A heap-based buffer overflow vulnerability exists in Windows Management Instrumentation . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is categorized as a High severity issue (CVSS 3.1 score of 7.8). Remediation is available via an official fix ...

CVE-2026-83781

The Windows Program Compatibility Assistant Service is vulnerable to an improper null termination (CWE-170) flaw. This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific versions or exploit details are provided in the documents; however, a remediation ...

CVE-2026-83791

The Windows Virtual Input component is susceptible to an improper authorization vulnerability (CWE-283), which allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated with a CVSS v3.1 score of 7.8 (High). No specific exploit details or remediation versions...

CVE-2026-83762

A Use after free vulnerability exists in Windows Win32K (CWE-416), which allows an authorized attacker to perform local privilege escalation . The impact is classified as HIGH , potentially affecting confidentiality, integrity, and availability. Remediation is available through an official fix pr...

CVE-2026-83764

A vulnerability in the Windows Clipboard User Service stems from incorrect authorization , which allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5, reflecting a MEDIUM severity with HIGH confidentiality impact. No specific exploit information or r...

CVE-2026-83763

A type confusion vulnerability in the Windows Input System allows an authorized attacker to achieve local privilege elevation . The root cause involves the access of a resource using an incompatible type. While specific affected versions are not detailed in the provided documents, remediation is ...

CVE-2026-83765

An out-of-bounds read vulnerability exists in the Windows DWM Core Library . This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , with a high impact on confidentiality. No specific exploit information or remediation details are p...

CVE-2026-83774

A vulnerability in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose sensitive system information locally. The root cause is the exposure of this information to an unauthorized control sphere (CWE-497). The impact is a high level of confidentiality loss, though integrit...

CVE-2026-83757

A heap-based buffer overflow exists in the Windows Win32K component. This vulnerability allows an authorized attacker to achieve local privilege escalation . The official remediation is an OFFICIAL_FIX provided by Microsoft. No specific exploit code or in-the-wild exploitation details are provide...

CVE-2026-83773

The Windows MIDI Service Module is vulnerable to an information disclosure flaw (CWE-497). This vulnerability allows an authorized attacker to disclose sensitive system information locally due to exposure to an unauthorized control sphere. No specific exploit details or patch versions are provide...

CVE-2026-83767

A stack-based buffer overflow vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local privilege escalation on affected systems. The vulnerability is characterized by a High severity base score of 7.8. No specific details regarding exploi...

CVE-2026-83752

A Use after free vulnerability exists in Windows Installer which allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . While the documents confirm the existence of the flaw and its potential impact on local privileges, no specific e...

CVE-2026-83755

A vulnerability in the Windows Win32K component allows an authorized attacker to disclose information locally due to the use of uninitialized resources (CWE-908). The impact is categorized as high for confidentiality, though integrity and availability are not affected. While specific exploit deta...

CVE-2026-83751

A Use after free vulnerability exists in the Windows MIDI Service Module . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated with a High severity base score of 7.0 . No specific exploit details or remediation steps are provided in the docum...

CVE-2026-83737

An out-of-bounds read vulnerability exists in the Windows NTFS file system. This flaw allows an authorized attacker to disclose information locally on the affected system. The vulnerability is associated with CWE-125 and has a CVSS 3.1 score of 5.5. No specific exploit details or remediation vers...

CVE-2026-83750

A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Error Reporting , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-367 (TOCTOU) and CWE-122 (Heap-based Buffer Overflow). The impact includes high levels ...

CVE-2026-83756

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-83747

An out-of-bounds read vulnerability exists in Windows Error Reporting . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit information or patch versions are provided in the documents beyond the confirmation ...

CVE-2026-83735

A Release of invalid pointer or reference vulnerability in the Windows Kernel allows an authorized attacker to perform a local privilege escalation . This issue is associated with CWE-763 . While the vulnerability has a high severity score, specific details regarding the affected component, preci...