CVE-2026-83896

A heap-based buffer overflow vulnerability exists in Windows Direct Composition . This flaw allows an authorized attacker to achieve local privilege elevation . No specific details regarding the affected component versions, root cause, or exploit code are provided in the documents. Remediation is...

CVE-2026-83885

The Windows Virtualization-Based Security (VBS) Enclave is vulnerable to a flaw characterized by inadequate encryption strength . This security weakness allows an authorized attacker to perform spoofing locally . The vulnerability is associated with CWE-326 . No specific exploit code or details r...

CVE-2026-83902

A heap-based buffer overflow exists in Windows Direct Composition which could allow an authorized attacker to perform a local elevation of privilege . The vulnerability is characterized by a HIGH base severity score of 7.8. No specific exploit details or in-the-wild exploitation information are p...

CVE-2026-83876

A Use after free vulnerability in Windows Shell allows an authorized attacker to achieve local privilege elevation . The vulnerability is characterized as having a high severity with a CVSS 3.1 score of 7.8 . No specific versions, root causes, or exploit details are provided in the documents. Rem...

CVE-2026-83872

A vulnerability exists in Windows TCP/IP due to an incorrect conversion between numeric types (CWE-681). This flaw allows an authorized attacker to perform a local elevation of privilege . The impact includes high severity for confidentiality, integrity, and availability. No specific exploit deta...

CVE-2026-83852

A Use after free vulnerability exists in the Windows Bind Filter Driver . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is assigned a High base severity score of 7.0. No specific exploit details or specific affected versions are provided in the ...

CVE-2026-83864

The Windows NTFS file system contains an improper access control vulnerability. This flaw allows an authorized attacker to perform a local information disclosure , potentially exposing sensitive data. While the vulnerability is confirmed, the provided documents do not specify the exact component,...

CVE-2026-83851

A heap-based buffer overflow exists in the Windows Partition Management Driver . This vulnerability allows an unauthorized attacker to elevate privileges over a network. The CVSS 3.1 score is 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No specific e...

CVE-2026-83853

A Use after free vulnerability exists in Windows Hello , which allows an authorized attacker to achieve local privilege escalation . The impact is classified as high regarding confidentiality, integrity, and availability. No specific exploit details or in-the-wild exploitation information are pro...

CVE-2026-83854

A vulnerability exists in Windows Notification due to improper access control , which allows an authorized attacker to disclose information locally . The vulnerability is associated with CWE-306 (Missing Authentication for Critical Function). A MEDIUM severity rating of 5.5 (CVSS 3.1) is assigned...

CVE-2026-83866

A Use after free vulnerability exists in Windows Win32K , which allows an authorized attacker to achieve local privilege escalation . While specific impacted versions are not detailed in the provided documents, the vulnerability is categorized as a high-severity issue. No specific exploit links o...

CVE-2026-83855

The Windows WLAN Service is vulnerable to an integer underflow (wrap or wraparound) , as categorized under CWE-191 . This vulnerability allows an unauthorized attacker to cause a denial of service (DoS) over a network. The official remediation level is an official fix , and the severity is rated ...

CVE-2026-83862

A Use after free vulnerability exists in Windows Network Load Balancing , which allows an unauthorized attacker to achieve remote code execution over a network. This vulnerability has a CVSS v3.1 score of 9.8 (CRITICAL) , indicating a high impact on confidentiality, integrity, and availability. T...

CVE-2026-83836

A Heap-based buffer overflow exists in Windows Event Tracing which could allow an unauthorized attacker to execute code locally . The vulnerability involves a CWE-122 (Heap-based Buffer Overflow) and CWE-191 (Integer Underflow) condition. The Base Severity is High (7.8), with the attack vector be...

CVE-2026-83849

An out-of-bounds read vulnerability exists in Windows Hello , which allows an authorized attacker to disclose information locally . The vulnerability's confidentiality impact is rated as high, while integrity and availability are unaffected. No specific exploit code or in-the-wild exploitation de...

CVE-2026-83842

A double free vulnerability exists within the Windows TCP/IP stack. This flaw allows an authorized attacker to achieve local privilege escalation . Exploitation details and specific affected versions are not provided in the documents. Remediation involves applying the official fix from Microsoft.

CVE-2026-83839

A Time-of-check time-of-use (TOCTOU) race condition exists in Windows Hyper-V . This vulnerability allows an authorized attacker to perform a local privilege escalation . No specific affected versions, root cause components, or remediation steps are provided in the documentation. Exploitation det...

CVE-2026-83848

A vulnerability exists in the Windows COM+ Event System Service due to an untrusted pointer dereference . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or versions are provided in the documents, though the issue is confirmed with a HIG...

CVE-2026-83843

A vulnerability exists in the Windows Internet Key Exchange (IKE) Protocol caused by an out-of-bounds read (CWE-125). This flaw allows an unauthorized attacker to perform a denial of service (DoS) attack over a network. While the CVSS 3.1 score indicates a HIGH severity (7.5) with a NETWORK attac...

CVE-2026-83838

The Windows Bluetooth A2DP driver is vulnerable to an integer underflow (wrap or wraparound) . This flaw allows an authorized attacker to achieve elevation of privilege over an adjacent network. The vulnerability is classified as HIGH severity with a CVSS 3.1 score of 8.0. No specific exploit lin...