CVE-2026-83873

A Relative path traversal vulnerability exists in Windows Shell , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-23 . While the documents confirm the existence of the vulnerability and the potential for privilege elevation, s...

CVE-2026-83877

An integer overflow or wraparound vulnerability exists in the HID Parser Library , affecting Windows Devices . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability is confirmed with a CVSS3.1 base score of 7.8 , the provided documents do not speci...

CVE-2026-83895

A heap-based buffer overflow exists in the Windows Win32 Kernel Subsystem . This vulnerability allows an unauthorized attacker to elevate privileges through a physical attack . No specific exploit information or remediation steps are provided in the documents.

CVE-2026-83859

A Use after free vulnerability in Windows NTFS allows an authorized attacker to perform a local privilege elevation . The vulnerability is associated with CWE-416 and has been assigned a CVSS 3.1 base score of 7.8 (High). Specific details regarding the affected component, root cause, or remediati...

CVE-2026-83863

A heap-based buffer overflow vulnerability exists in Servicing Stack Updates . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-122 and has a CVSS 3.1 base score of 7.8 (High) . No specific information regarding exploitatio...

CVE-2026-83881

A Heap-based buffer overflow exists in the Windows exFAT File System , which could allow an authorized attacker to perform a local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 score of 7.8. No specific exploit information or version-specific details are provided in the do...

CVE-2026-83840

A weak authentication vulnerability in Windows Error Reporting allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-1390 . While the CVSS v3.1 score is 7.8 (High) , the documents do not provide specific software versions, root cause detail...

CVE-2026-83841

A race condition vulnerability exists in Windows Win32K due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has an official fix available, but no specific exploit detail...

CVE-2026-83777

A heap-based buffer overflow exists in the Windows Bluetooth Service . This vulnerability allows an unauthorized attacker to elevate privileges over an adjacent network. Exploitation details and specific affected versions are not provided in the documents, but the vulnerability is associated with...

CVE-2026-83762

A Use after free vulnerability exists in Windows Win32K (CWE-416), which allows an authorized attacker to perform local privilege escalation . The impact is classified as HIGH , potentially affecting confidentiality, integrity, and availability. Remediation is available through an official fix pr...

CVE-2026-83757

A heap-based buffer overflow exists in the Windows Win32K component. This vulnerability allows an authorized attacker to achieve local privilege escalation . The official remediation is an OFFICIAL_FIX provided by Microsoft. No specific exploit code or in-the-wild exploitation details are provide...

CVE-2026-83771

A Use after free vulnerability exists in the Windows Camera Frame Server Monitor . This flaw allows an unauthorized attacker to elevate privileges over an adjacent network. The vulnerability is associated with CWE-416 and has a High base severity score of 8.8. No specific exploit details or direc...

CVE-2026-83767

A stack-based buffer overflow vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to perform a local privilege escalation on affected systems. The vulnerability is characterized by a High severity base score of 7.8. No specific details regarding exploi...

CVE-2026-83735

A Release of invalid pointer or reference vulnerability in the Windows Kernel allows an authorized attacker to perform a local privilege escalation . This issue is associated with CWE-763 . While the vulnerability has a high severity score, specific details regarding the affected component, preci...

CVE-2026-83756

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-83751

A Use after free vulnerability exists in the Windows MIDI Service Module . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated with a High severity base score of 7.0 . No specific exploit details or remediation steps are provided in the docum...

CVE-2026-83752

A Use after free vulnerability exists in Windows Installer which allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . While the documents confirm the existence of the flaw and its potential impact on local privileges, no specific e...

CVE-2026-83718

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege escalation . The vulnerability results in high impact regarding confidentiality, integrity, and availability. Official remediation is available via Microsoft. No specific exploit code or i...

CVE-2026-83717

A Use after free vulnerability exists in the Windows Installer component. This flaw allows an authorized attacker to achieve local privilege escalation . Exploitation details are not provided in the documents. Remediation is available via an official fix .

CVE-2026-83676

The Windows Installer component is vulnerable to an integer underflow (wrap or wraparound) . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed, specific technical details regarding the affected functions or files are not provided ...