CVE-2026-83735

A Release of invalid pointer or reference vulnerability in the Windows Kernel allows an authorized attacker to perform a local privilege escalation . This issue is associated with CWE-763 . While the vulnerability has a high severity score, specific details regarding the affected component, preci...

CVE-2026-83721

A Use after free vulnerability exists in Windows Win32K (CVE-2026-83721). This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a CVSS v3.1 base score of 7.8 (High) . No specific exploit details or mitigation steps are provided in the ...

CVE-2026-83718

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege escalation . The vulnerability results in high impact regarding confidentiality, integrity, and availability. Official remediation is available via Microsoft. No specific exploit code or i...

CVE-2026-83720

A Use after free vulnerability in Windows Kerberos allows an authorized attacker to perform local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability loss. Remediation is available via an official fix .

CVE-2026-83724

A heap-based buffer overflow exists in Windows Management Instrumentation , which allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 (High) . No specific exploit details, exploit links, or specific software versions are provided...

CVE-2026-83732

A Use after free vulnerability exists in the Windows Win32K component. This flaw allows an authorized attacker to perform a local privilege escalation . No specific exploitation details or patch versions are provided in the documents.

CVE-2026-83728

A vulnerability in Windows Hyper-V arises from the improper validation of syntactic correctness of input . This flaw allows an authorized attacker to perform spoofing locally . The severity is rated as HIGH with a CVSS base score of 8.8. While the vulnerability is confirmed, specific details rega...

CVE-2026-83716

A heap-based buffer overflow vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to achieve local code execution . While the specific component or file causing the overflow is not detailed in the provided documents, the vulnerability has a HIGH base severity score of...

CVE-2026-83717

A Use after free vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to achieve local privilege escalation . Exploitation details are not provided in the documents. Remediation is available via an official fix .

CVE-2026-83709

A heap-based buffer overflow vulnerability exists in Windows NTLM . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability's technical impact is high regarding confidentiality, integrity, and availability, the documents do not provide specific explo...

CVE-2026-83698

A heap-based buffer overflow exists in the Windows Client-Side Caching (CSC) Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit information or in-the-wild exploitation details are provided in the documents. Remediation involves a...

CVE-2026-83686

The Microsoft Windows Search Component is susceptible to an out-of-bounds read vulnerability. This flaw allows an authorized attacker to disclose information locally. The severity is rated as MEDIUM with a CVSS 3.1 score of 5.5, characterized by a high confidentiality impact and low attack comple...

CVE-2026-83702

A Use after free vulnerability exists in Windows Installer , which allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.0 (High), with impact across confidentiality, integrity, and availability. Official remediation is available via Microsoft.

CVE-2026-83696

A Use after free vulnerability exists in the Windows Cloud Files Mini Filter Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.0 (High) . No specific exploitation details or patch versions are provided in the docum...

CVE-2026-83689

A Use after free vulnerability exists in Windows Error Reporting . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with high impact on confidentiality, integrity, and availability. Remediation is available via an official fix from...

CVE-2026-83714

A use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-908 . While the specific technical root cause is not detailed beyond the uninitialized resource, the impact is categorized as a hi...

CVE-2026-83697

A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Modern Device Management (MDM) . This vulnerability allows an authorized attacker to perform tampering locally . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-83701

A Use after free vulnerability exists in the Windows Now Playing Session Manager . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is indicated as an OFFI...

CVE-2026-83676

The Windows Installer component is vulnerable to an integer underflow (wrap or wraparound) . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed, specific technical details regarding the affected functions or files are not provided ...

CVE-2026-83682

A Use after free vulnerability exists in the Windows TCP/IP stack. This flaw allows an authorized attacker to achieve local privilege escalation . No specific technical details regarding the underlying component or internal function are provided, and no exploit information or specific patch versi...