20 matches found
CVE-2026-96914
Integer overflow or wraparound in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-102211
Use after free in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-108471
Windows Virtualization-Based Security (VBS) Enclave is susceptible to an untrusted pointer dereference vulnerability. This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is characterized by a high severity base score of 8.8 , with significant impacts ...
CVE-2026-108130
A heap-based buffer overflow exists in the Windows Virtualization-Based Security (VBS) Enclave . This vulnerability allows an authorized attacker to achieve local privilege elevation . No specific exploit information or remediation details are provided in the documents beyond the confirmation of ...
Windows Virtualization-Based Security (VBS) Enclave Security Feature Bypass Vulnerability
Time-of-check time-of-use toctou race condition in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...
Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
PT-2026-112648
Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description Inadequate encryption strength in the Virtualization-Based Security VBS Enclave allows an authorized attacker to perform local spoofing. VBS Enclave ...
CVE-2026-83498: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-83501: Out-of-bounds Read
Out-of-bounds read in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to disclose information locally...
CVE-2026-23670: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...
CVE-2026-20876: Heap-based Buffer Overflow
Heap-based buffer overflow in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-20819: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to disclose information locally...
CVE-2026-20938: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2026-20935: Untrusted Pointer Dereference
Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an unauthorized attacker to disclose information locally...
CVE-2025-53717: Reliance on Untrusted Inputs in a Security Decision
Reliance on untrusted inputs in a security decision in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2025-47159: Protection Mechanism Failure
Protection mechanism failure in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2025-48811: Missing Support for Integrity Check
Missing support for integrity check in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2025-48803: Missing Support for Integrity Check
Missing support for integrity check in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2025-27735: Insufficient Verification of Data Authenticity
Insufficient verification of data authenticity in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...