CVE-2026-83695

A vulnerability in the Windows Event Logging Service involves the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to perform a local information disclosure , potentially revealing sensitive data on the system. The CVSS 3.1 score is 5.5 (Medium). No specific exploi...

CVE-2026-83703

An out-of-bounds read vulnerability exists in the Windows Wi-Fi Driver . This flaw allows an unauthorized attacker to trigger a denial of service (DoS) on the affected system from an adjacent network . While the CVSS 3.1 score indicates a Medium severity (6.5), it highlights a high impact on avai...

CVE-2026-83709

A heap-based buffer overflow vulnerability exists in Windows NTLM . This flaw allows an authorized attacker to achieve local privilege elevation . While the vulnerability's technical impact is high regarding confidentiality, integrity, and availability, the documents do not provide specific explo...

CVE-2026-83714

A use of uninitialized resource in Windows HTTP.sys allows an authorized attacker to perform a local information disclosure . The vulnerability is associated with CWE-908 . While the specific technical root cause is not detailed beyond the uninitialized resource, the impact is categorized as a hi...

CVE-2026-83680

A heap-based buffer overflow vulnerability exists in Windows Installer . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability has a CVSS 3.1 base score of 7.0 (HIGH) . While the technical root cause is identified as a heap overflow, no specific exploit ...

CVE-2026-83679

A Use after free vulnerability exists in the Windows Defender Firewall Service . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-416 and carries a CVSS 3.1 base score of 7.8 . No specific exploit information or detailed remed...

CVE-2026-83676

The Windows Installer component is vulnerable to an integer underflow (wrap or wraparound) . This flaw allows an authorized attacker to achieve local privilege escalation . While the vulnerability is confirmed, specific technical details regarding the affected functions or files are not provided ...

CVE-2026-83668

An out-of-bounds read vulnerability exists in the Windows WLAN Service . This flaw allows an authorized attacker to perform a local information disclosure by reading data outside of intended memory boundaries. The official CVSS 3.1 score is 5.5 (Medium) , indicating a local attack vector with low...

CVE-2026-83677

A memory leak vulnerability (CWE-401) exists in the Windows DHCP Client due to a missing release of memory after its effective lifetime. This flaw allows an unauthorized attacker to conduct a denial of service (DoS) attack over a network. The CVSS v3.1 score is 7.5 (High) , indicating low attack ...

CVE-2026-83682

A Use after free vulnerability exists in the Windows TCP/IP stack. This flaw allows an authorized attacker to achieve local privilege escalation . No specific technical details regarding the underlying component or internal function are provided, and no exploit information or specific patch versi...

CVE-2026-83665

A null pointer dereference vulnerability exists in the Windows DHCP Server , which could allow an unauthorized attacker to cause a denial of service over the network. The vulnerability is associated with CWE-476 . No specific versions, root cause files, or exploit links are provided in the docume...

CVE-2026-83672

A vulnerability in Windows Installer allows an authorized attacker to disclose sensitive system information locally. This flaw is categorized as an exposure of sensitive system information to an unauthorized control sphere (CWE-497). While the CVSS 3.1 score of 4.7 (Medium) reflects a high confid...

CVE-2026-83683

A vulnerability in Windows Encrypting File System (EFS) allows an authorized attacker to perform an absolute path traversal to disclose information over a network. The impact is categorized as high confidentiality impact with a CVSS 3.1 base score of 6.5 . While specific exploit details are not p...

CVE-2026-83638

A heap-based buffer overflow exists in the Windows USB Driver . This vulnerability allows an authorized attacker to perform a local privilege elevation . No specific versions are listed as affected, and no exploit details or proof-of-concept code are provided in the documents. Remediation involve...

CVE-2026-83659

The Windows User Profile Service is vulnerable to a local privilege escalation issue caused by improper link resolution before file access (CWE-59). An authorized attacker can exploit this link following flaw to elevate their privileges on the local system. No specific exploit details or remediat...

CVE-2026-83651

A vulnerability exists in Windows GDI caused by an out-of-bounds read (CWE-125). This flaw allows an unauthorized attacker to disclose information over a network. The vulnerability has a MEDIUM base severity (CVSS 3.1 score of 6.5) and requires user interaction . While the vulnerability is confir...

CVE-2026-83636

A null pointer dereference vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to perform a local denial of service (DoS) attack. While the documents confirm the impact on availability, no specific component, file, or version details are provided. No exploits are cur...

CVE-2026-83640

A heap-based buffer overflow exists in Windows NTFS that allows an authorized attacker to achieve local code execution . The vulnerability is rated with a High severity (CVSS 3.1 score of 7.8). No specific exploit details or in-the-wild exploitation information are provided in the documents. Reme...

CVE-2026-83656

A missing authentication vulnerability exists in the Windows Modern Device Management (MDM) component. This flaw allows an authorized attacker to perform tampering locally by accessing a critical function without proper authentication. The CVSS 3.1 score is 4.7 (Medium) , indicating a local attac...

CVE-2026-83643

A stack-based buffer overflow vulnerability exists in Windows Error Reporting , which could allow an unauthorized attacker to execute code over a network . The vulnerability has a CVSS 3.1 base score of 8.8 (High) , indicating significant impact on confidentiality, integrity, and availability. No...