CVE-2026-83840

A weak authentication vulnerability in Windows Error Reporting allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-1390 . While the CVSS v3.1 score is 7.8 (High) , the documents do not provide specific software versions, root cause detail...

CVE-2026-83750

A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Error Reporting , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-367 (TOCTOU) and CWE-122 (Heap-based Buffer Overflow). The impact includes high levels ...

CVE-2026-83747

An out-of-bounds read vulnerability exists in Windows Error Reporting . This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. No specific exploit information or patch versions are provided in the documents beyond the confirmation ...

CVE-2026-83689

A Use after free vulnerability exists in Windows Error Reporting . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with high impact on confidentiality, integrity, and availability. Remediation is available via an official fix from...

CVE-2026-83643

A stack-based buffer overflow vulnerability exists in Windows Error Reporting , which could allow an unauthorized attacker to execute code over a network . The vulnerability has a CVSS 3.1 base score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No...

CVE-2026-83519

A heap-based buffer overflow exists in Windows Error Reporting , which could allow an unauthorized attacker to execute arbitrary code over a network. This vulnerability has a CVSS score of 9.80 and does not require prior authentication or user interaction. Exploitation details and specific patche...

CVE-2026-88132

An origin validation error in Azure Key Vault allows an unauthorized attacker to disclose information over a network. This vulnerability is classified as an Access to Sensitive Data issue with a CVSS v3.1 score of 5.9 (Medium) . Microsoft has released updates to address this vulnerability; users ...

CVE-2026-70213

An origin validation error in Microsoft Power Apps allows an authorized attacker to perform remote code execution over a network. This vulnerability has a HIGH severity rating with a CVSS score of 8.0. Documentation confirms the impact is the execution of arbitrary code . No specific exploit link...

EUVD-2026-99610

Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network...

EUVD-2026-99597

Origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network...

CVE-2026-69877

An origin validation error in Azure DevOps allows an unauthorized attacker to disclose information over a network. The vulnerability results in access to sensitive data , as indicated by the CVSS metric and the CVE description. Microsoft has released updates to address this issue, and users are r...

CVE-2026-85800

A Heap-based buffer overflow exists in Windows Error Reporting that allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 . No specific exploit details or direct links to in-the-wild exploitation are provided in the documentation. Remed...

CVE-2026-85354

A Use after free vulnerability exists in Windows Error Reporting , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a High severity base score of 7.0. No specific exploit links or remediation details beyond the official Microsof...

CVE-2026-83916

A double free vulnerability in Windows Error Reporting allows an authorized attacker to achieve local code execution . The vulnerability is characterized by a CWE-415 flaw, which can lead to significant impacts on confidentiality, integrity, and availability . An official fix is available, and sp...

CVE-2026-83826

A vulnerability exists in Windows Error Reporting due to an untrusted pointer dereference . This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 base score is 7.8 (High) , reflecting high impacts on confidentiality, integrity, and availability. While the ...

CVE-2026-83758

A heap-based buffer overflow exists in Windows Error Reporting . This vulnerability allows an authorized attacker to achieve local code execution . Remediation is available via an official fix from Microsoft.

CVE-2026-83748

A heap-based buffer overflow vulnerability exists in Windows Error Reporting . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated with a CVSS score of 9.8 (CRITICAL), indicating a high level of severity with low attack complexity ...

CVE-2026-83715

The Windows Error Reporting service is vulnerable to a Missing Authentication for Critical Function (CWE-306) flaw. This vulnerability allows an authorized attacker to perform tampering locally on the affected system. The CVSS 3.1 base score is 7.1 (High) , with local access and low complexity re...

CVE-2026-83693

A heap-based buffer overflow exists in Windows Error Reporting , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as CRITICAL with a CVSS score of 9.8. While the documents confirm the impact is the execution of arbitrary c...

CVE-2026-83669

A vulnerability exists in Windows Error Reporting due to the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild ex...