CVE-2026-83725

A heap-based buffer overflow exists in the Microsoft Windows Search Component , which could allow an unauthorized attacker to execute code over a network. The vulnerability is associated with CWE-122 and CWE-190 . Detailed information regarding specific affected versions, the exact root cause, or...

CVE-2026-83728

A vulnerability in Windows Hyper-V arises from the improper validation of syntactic correctness of input . This flaw allows an authorized attacker to perform spoofing locally . The severity is rated as HIGH with a CVSS base score of 8.8. While the vulnerability is confirmed, specific details rega...

CVE-2026-83718

A Use after free vulnerability in Windows Installer allows an authorized attacker to achieve local privilege escalation . The vulnerability results in high impact regarding confidentiality, integrity, and availability. Official remediation is available via Microsoft. No specific exploit code or i...

CVE-2026-83720

A Use after free vulnerability in Windows Kerberos allows an authorized attacker to perform local privilege escalation . The impact includes high levels of confidentiality, integrity, and availability loss. Remediation is available via an official fix .

CVE-2026-83739

A use after free vulnerability in the Windows Bluetooth Service allows an unauthorized attacker to achieve Remote Code Execution (RCE) over an adjacent network. The vulnerability has a CVSS 3.1 base score of 7.5. While exploitation details are not provided in the documents, the impact includes hi...

CVE-2026-83736

A heap-based buffer overflow exists in the Windows Kernel . This vulnerability allows an authorized attacker to perform a local privilege escalation . The official CVSS 3.1 score is 5.5 (Medium) , with a high impact on availability. Remediation via an official fix is available through Microsoft's...

CVE-2026-83709

A heap-based buffer overflow vulnerability exists in Windows NTLM . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability's technical impact is high regarding confidentiality, integrity, and availability, the documents do not provide specific explo...

CVE-2026-83702

A Use after free vulnerability exists in Windows Installer , which allows an authorized attacker to elevate privileges locally . The CVSS 3.1 score is 7.0 (High), with impact across confidentiality, integrity, and availability. Official remediation is available via Microsoft.

CVE-2026-83701

A Use after free vulnerability exists in the Windows Now Playing Session Manager . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is indicated as an OFFI...

CVE-2026-83696

A Use after free vulnerability exists in the Windows Cloud Files Mini Filter Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability has a CVSS 3.1 score of 7.0 (High) . No specific exploitation details or patch versions are provided in the docum...

CVE-2026-83685

A buffer over-read vulnerability exists in the Windows IKE Extension . This flaw allows an authorized attacker to perform a denial of service (DoS) over the network. The vulnerability is confirmed by Microsoft metrics with a CVSS score of 6.5. No specific exploit details or remediation steps are ...

CVE-2026-83697

A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Modern Device Management (MDM) . This vulnerability allows an authorized attacker to perform tampering locally . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-83686

The Microsoft Windows Search Component is susceptible to an out-of-bounds read vulnerability. This flaw allows an authorized attacker to disclose information locally. The severity is rated as MEDIUM with a CVSS 3.1 score of 5.5, characterized by a high confidentiality impact and low attack comple...

CVE-2026-83703

An out-of-bounds read vulnerability exists in the Windows Wi-Fi Driver . This flaw allows an unauthorized attacker to trigger a denial of service (DoS) on the affected system from an adjacent network . While the CVSS 3.1 score indicates a Medium severity (6.5), it highlights a high impact on avai...

CVE-2026-83698

A heap-based buffer overflow exists in the Windows Client-Side Caching (CSC) Service . This vulnerability allows an authorized attacker to achieve local privilege escalation . No specific exploit information or in-the-wild exploitation details are provided in the documents. Remediation involves a...

CVE-2026-83695

A vulnerability in the Windows Event Logging Service involves the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure , potentially revealing sensitive data on the system. The CVSS 3.1 score is 5.5 (Medium). No specific exploi...

CVE-2026-83714

A use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-908 . While the specific technical root cause is not detailed beyond the uninitialized resource, the impact is categorized as a hi...

CVE-2026-83689

A Use after free vulnerability exists in Windows Error Reporting . This flaw allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.0 (High) , with high impact on confidentiality, integrity, and availability. Remediation is available via an official fix from...

CVE-2026-83668

An out-of-bounds read vulnerability exists in the Windows WLAN Service . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of intended memory boundaries. The official CVSS 3.1 score is 5.5 (Medium) , indicating a local attack vector with low...

CVE-2026-83677

A memory leak vulnerability (CWE-401) exists in the Windows DHCP Client due to a missing release of memory after its effective lifetime. This flaw allows an unauthorized attacker to conduct a denial of service (DoS) attack over a network. The CVSS v3.1 score is 7.5 (High) , indicating low attack ...