CVE-2026-83784

A vulnerability in the Windows Encrypting File System (EFS) allows an authorized attacker to perform an absolute path traversal attack. This flaw can be exploited over a network to elevate privileges . The CVSS 3.1 score is 8.8 (High) , reflecting high impacts on confidentiality, integrity, and a...

CVE-2026-83780

A Use after free vulnerability in the Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network . This vulnerability is classified with a CRITICAL CVSSv3.1 score of 9.8 , indicating a high impact on confidentiality, integrity, and availability. According to NCSC docu...

CVE-2026-83828

A heap-based buffer overflow exists in the Windows MIDI Service Module , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-190 (Integer Overflow or Wraparound). No specific exploit details ...

CVE-2026-83796

A Use after free vulnerability in the Windows Kernel allows an authorized attacker to perform a local privilege escalation . The vulnerability is characterized by a high severity score of 7.8 (CVSS v3.1). While the technical root cause is identified as a use after free, specific details regarding...

CVE-2026-83758

A heap-based buffer overflow exists in Windows Error Reporting . This vulnerability allows an authorized attacker to achieve local code execution . Remediation is available via an official fix from Microsoft.

CVE-2026-83754

A heap-based buffer overflow vulnerability exists in OpenSSH for Windows , potentially allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability is confirmed to have a high severity (CVSS 3.1 score of 7.5) with network attack vectors and high impact on c...

CVE-2026-83775

A race condition vulnerability exists in Windows Installer due to concurrent execution using a shared resource with improper synchronization. This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-362 (Race Condition) and CWE-122 (H...

CVE-2026-83759

A code injection vulnerability exists in the Windows Encrypting File System (EFS) . This flaw allows an authorized attacker to execute arbitrary code over a network. The vulnerability is associated with CWE-94 (Improper Control of Generation of Code). While the documents confirm the existence of ...

CVE-2026-83753

A heap-based buffer overflow exists in the Windows Camera Frame Server Monitor . This vulnerability allows an authorized attacker to perform a local privilege escalation . No specific exploitation details or direct links to exploit code are provided in the documents, though an official fix is ind...

CVE-2026-83768

A heap-based buffer overflow exists in the Windows Kernel , which allows an authorized attacker to achieve local privilege escalation . No specific component, version, or remediation details are provided in the documents beyond the official fix status indicated in the metrics. Exploitation detail...

CVE-2026-83761

A Use after free vulnerability exists in the Windows Win32 Kernel Subsystem . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed with a CVSS 3.1 base score of 7.8 (High) , specific exploit details and in-the-wild exploitation infor...

CVE-2026-83779

A heap-based buffer overflow exists in Windows Installer , which could allow an authorized attacker to achieve local privilege elevation . The vulnerability is characterized by the CVSS 3.1 score of 7.8, indicating high severity. While the specific root cause or affected version is not detailed i...

CVE-2026-83738

A Use after free vulnerability exists in the Windows Ancillary Function Driver for WinSock . This flaw allows an authorized attacker to achieve local privilege escalation . No specific exploit details or exploitation links are provided in the documents. Remediation involves applying the official ...

CVE-2026-83748

A heap-based buffer overflow vulnerability exists in Windows Error Reporting . This flaw allows an unauthorized attacker to achieve remote code execution over a network. The vulnerability is rated with a CVSS score of 9.8 (CRITICAL), indicating a high level of severity with low attack complexity ...

CVE-2026-83715

The Windows Error Reporting service is vulnerable to a Missing Authentication for Critical Function (CWE-306) flaw. This vulnerability allows an authorized attacker to perform tampering locally on the affected system. The CVSS 3.1 base score is 7.1 (High) , with local access and low complexity re...

CVE-2026-83740

A Use after free vulnerability in Windows Hello allows an authorized attacker to perform a local elevation of privilege . While the specific component or file is not detailed in the provided documents, the vulnerability has a CVSS 3.1 base score of 7.0 (High) . No specific exploit information or ...

CVE-2026-83727

A buffer over-read vulnerability exists in the Windows Overlay Filter component. This flaw allows an authorized attacker to achieve local privilege escalation . While the impact is categorized as High with potential effects on confidentiality, integrity, and availability, specific exploit details...

CVE-2026-83713

An out-of-bounds read vulnerability exists in the Windows Universal Disk Format File System Driver (UDFS) . This flaw allows an authorized attacker to disclose information locally. The vulnerability is categorized under CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control ...

CVE-2026-83749

A Use after free vulnerability exists in the Windows Overlay Filter , which allows an authorized attacker to achieve local privilege elevation . This vulnerability is identified as CVE-2026-83749 and has a CVSS 3.1 base score of 7.0 . Exploitation details and specific affected versions are not pr...

CVE-2026-83723

A use of uninitialized resource vulnerability in the Windows Event Logging Service allows an authorized attacker to disclose information locally. The vulnerability is associated with CWE-908 and has a CVSS 3.1 base score of 5.5 (Medium) . No specific exploit details or information regarding parti...