The vulnerability of the trusted execution environment allows for attacks on the Virtualization-Based Security (VBS) Enclave of Windows operating systems, enabling attackers to increase their privileges.

The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to unreliable pointer aliasing. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2026-20935

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an unauthorized attacker to disclose information locally...

CVE-2026-20938

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-20938

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-20876

Heap-based buffer overflow in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-20935 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability

...

CVE-2026-20935 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability

...

CVE-2026-20938

CVE-2026-20938 is a local elevation-of-privilege in Windows VBS Enclave caused by an untrusted pointer dereference. Affected: Windows 11 VBS Enclave implementations. Impact per sources: local privilege escalation with high confidentiality/integrity/availability impact (CVSS 7.8). Remediation: Mic...

CVE-2026-20938 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

...

CVE-2026-20876 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

...

CVE-2026-20876 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

...

CVE-2026-20819

CVE-2026-20819 is a local-information-disclosure vulnerability in Windows Virtualization-Based Security (VBS) Enclave. The root cause is an untrusted pointer dereference in the VBS Enclave, enabling an authorized attacker to disclose information locally. Public details identify affected Windows b...

CVE-2026-20819

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to disclose information locally...

CVE-2026-20819 Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability

...

Windows Virtualization-Based Security (VBS) Information Disclosure Vulnerability

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to disclose information locally...

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

PT-2026-2721

Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security VBS Enclave affected versions not specified Description A heap-based buffer overflow exists within the Windows Virtualization-Based Security VBS Enclave component. This condition allows a locally authorize...

PT-2026-2740

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...

CVE-2026-20819: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to disclose information locally...

CVE-2026-20938: Untrusted Pointer Dereference

Untrusted pointer dereference in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...