CVE-2026-83693

A heap-based buffer overflow exists in Windows Error Reporting , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as CRITICAL with a CVSS score of 9.8. While the documents confirm the impact is the execution of arbitrary c...

CVE-2026-83700

A Use after free vulnerability exists in the Windows Now Playing Session Manager . This flaw allows an authorized attacker to perform a local elevation of privilege . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-83691

A heap-based buffer overflow exists in the Windows DHCP Server component. This vulnerability allows an authorized attacker to perform a local privilege escalation . While the specific root cause or affected version numbers are not detailed in the provided documents, the vulnerability carries a Hi...

CVE-2026-83704

The Microsoft Windows Search Component is vulnerable to an elevation of privilege vulnerability due to improper link resolution before file access (link following). An authorized attacker can exploit this flaw to elevate privileges locally. While the documents confirm the vulnerability and its im...

CVE-2026-83708

A stack-based buffer overflow exists in Windows Installer , which allows an authorized attacker to achieve local privilege escalation . While the vulnerability's root cause is identified as a buffer overflow (CWE-121), specific affected versions and exploit links are not provided in the documents...

CVE-2026-83675

A use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to perform a local privilege elevation . The vulnerability is reported with a High base severity score of 7.0. Remediation is available via an official fix provided by Microsoft.

CVE-2026-83687

A Use after free vulnerability in Windows Connected User Experiences and Telemetry allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . Remediation is available via an official fix provided by Microsoft. No specific exploit details...

CVE-2026-83669

A vulnerability exists in Windows Error Reporting due to the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild ex...

CVE-2026-83678

A Heap-based buffer overflow exists in Windows TCP/IP , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.8 (High) . No specific exploit information or remediation details are provided in the documents b...

CVE-2026-83671

An out-of-bounds read vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to perform a local information disclosure , potentially revealing sensitive data. No specific root cause, affected versions, or exploit details are provided in the documents; however, an offici...

CVE-2026-83649

The Windows Local Security Authority Subsystem Service (LSASS) is susceptible to an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to perform a denial of service attack over a network. No specific software versions, root causes, or exploit links are provided i...

CVE-2026-83658

A vulnerability exists in Windows Error Reporting due to improper access control . This flaw allows an authorized attacker to perform a local information disclosure . The impact is classified as high regarding confidentiality, with a CVSS 3.1 base score of 5.5. Remediation is available via an off...

CVE-2026-83644

A Use after free vulnerability in the Windows Audio Service allows an authorized attacker to achieve local privilege escalation . The vulnerability impacts the service's ability to manage memory safely, potentially allowing a low-privileged user to gain higher system privileges. Remediation is av...

CVE-2026-83654

A local elevation of privilege vulnerability exists in Windows Modern Device Management (MDM) due to missing authentication for critical functions (CWE-306). An authorized attacker can exploit this flaw to gain higher privileges on the system. The vulnerability has a HIGH base severity score of 7...

CVE-2026-83650

A heap-based buffer overflow exists in Windows Media , which allows an authorized attacker to achieve local privilege elevation . No specific affected versions, root cause components, or remediation details are provided in the documents. No exploitation details are available.

CVE-2026-83657

A weak authentication vulnerability exists in Windows Modern Device Management (MDM) . This flaw allows an authorized attacker to perform tampering locally on the affected system. The vulnerability is associated with CWE-1390 and has a CVSS 3.1 score of 5.5 (MEDIUM) . No specific exploit details ...

CVE-2026-83652

A heap-based buffer overflow exists in Windows NTFS that allows an authorized attacker to achieve local privilege escalation . No specific details regarding the affected component, root cause, or exploit availability are provided in the documents. Remediation is indicated as an official fix via t...

CVE-2026-83583

A vulnerability in the Windows Geotag Broker involves improper access control , which allows an authorized attacker to achieve local privilege elevation . The impact of this vulnerability is classified as High , with potential consequences for confidentiality, integrity, and availability. Officia...

CVE-2026-83575

A use after free vulnerability exists in the Microsoft Windows Search Component . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or in-the-wild exploitation information are provided in the documents. Remediation is available via an offi...

CVE-2026-83499

The Windows Server Update Service is impacted by an insufficient granularity of access control vulnerability (CWE-1220). This flaw allows an authorized attacker to achieve local privilege escalation . While the technical root cause is not further detailed in the provided documents, the vulnerabil...