Windows Update Orchestrator Service Privilege Escalation

The vulnerability of the Windows Update Orchestrator Service on Windows operating systems is related to the improper handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...

Windows Update Orchestrator Service Privilege Escalation

The vulnerability of the Windows Update Orchestrator Service on Windows operating systems is related to incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level and gain unauthorized access ...

CVE-2026-97812

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83933

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...

CVE-2026-83930

Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83886

Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83793

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83507

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...

CVE-2026-81964

Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally...

EUVD-2026-100414

Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

CVE-2026-97812

A double free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to perform a local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with an attack vector of Local and high impact on confidentiality, integrity, and availability. No s...

CVE-2026-83933

The Windows Update Orchestrator Service is vulnerable to an improper link resolution before file access (link following) vulnerability. This flaw allows an authorized attacker to perform a local information disclosure . No specific software versions, exploit links, or remediation steps are provid...

CVE-2026-83930

A Use after free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High base severity score of 7.0. No specific details regarding the root cause, affected versions, or a...

CVE-2026-83507

The Windows Update Orchestrator Service is vulnerable to an improper link resolution before file access (link following) flaw. This vulnerability allows an authorized attacker to perform a local information disclosure . No specific exploit details or remediation steps are provided in the document...

CVE-2026-83886

A Use after free vulnerability exists in the Windows Update Orchestrator Service . This flaw allows an authorized attacker to achieve local privilege elevation . While the specific technical root cause is not detailed in the provided documents, the impact includes high levels of confidentiality, ...

CVE-2026-83793

A vulnerability in the Windows Update Orchestrator Service involves improper link resolution before file access (link following). This flaw allows an authorized attacker to achieve local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability loss. N...

CVE-2026-81964

The Windows Update Orchestrator Service is affected by a security feature bypass vulnerability. This issue is caused by the use of hard-coded credentials , which allows an authorized attacker to perform the bypass locally . The vulnerability is associated with CWE-798 . While the impact on integr...

Windows Update Orchestrator Service Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally...

Windows Update Orchestrator Service Elevation of Privilege Vulnerability

Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...

Windows Update Orchestrator Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally...