CVE-2026-83693

A heap-based buffer overflow exists in Windows Error Reporting , which could allow an unauthorized attacker to achieve remote code execution over a network. The vulnerability is classified as CRITICAL with a CVSS score of 9.8. While the documents confirm the impact is the execution of arbitrary c...

CVE-2026-83700

A Use after free vulnerability exists in the Windows Now Playing Session Manager . This flaw allows an authorized attacker to perform a local elevation of privilege . No specific exploit details or remediation steps are provided in the documents.

CVE-2026-83671

An out-of-bounds read vulnerability exists in Windows Hyper-V . This flaw allows an authorized attacker to perform a local information disclosure , potentially revealing sensitive data. No specific root cause, affected versions, or exploit details are provided in the documents; however, an offici...

CVE-2026-83678

A Heap-based buffer overflow exists in Windows TCP/IP , which could allow an authorized attacker to achieve local privilege escalation . The vulnerability is confirmed with a CVSS 3.1 base score of 7.8 (High) . No specific exploit information or remediation details are provided in the documents b...

CVE-2026-83669

A vulnerability exists in Windows Error Reporting due to the use of uninitialized resource (CWE-908). This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is rated with a CVSS 3.1 base score of 7.8 (High) . No specific exploit details or in-the-wild ex...

CVE-2026-83675

A use after free vulnerability exists in the Windows Kernel . This flaw allows an authorized attacker to perform a local privilege elevation . The vulnerability is reported with a High base severity score of 7.0. Remediation is available via an official fix provided by Microsoft.

CVE-2026-83687

A Use after free vulnerability in Windows Connected User Experiences and Telemetry allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-416 . Remediation is available via an official fix provided by Microsoft. No specific exploit details...

CVE-2026-83650

A heap-based buffer overflow exists in Windows Media , which allows an authorized attacker to achieve local privilege elevation . No specific affected versions, root cause components, or remediation details are provided in the documents. No exploitation details are available.

CVE-2026-83654

A local elevation of privilege vulnerability exists in Windows Modern Device Management (MDM) due to missing authentication for critical functions (CWE-306). An authorized attacker can exploit this flaw to gain higher privileges on the system. The vulnerability has a HIGH base severity score of 7...

CVE-2026-83657

A weak authentication vulnerability exists in Windows Modern Device Management (MDM) . This flaw allows an authorized attacker to perform tampering locally on the affected system. The vulnerability is associated with CWE-1390 and has a CVSS 3.1 score of 5.5 (MEDIUM) . No specific exploit details ...

CVE-2026-83652

A heap-based buffer overflow exists in Windows NTFS that allows an authorized attacker to achieve local privilege escalation . No specific details regarding the affected component, root cause, or exploit availability are provided in the documents. Remediation is indicated as an official fix via t...

CVE-2026-83649

The Windows Local Security Authority Subsystem Service (LSASS) is susceptible to an out-of-bounds read vulnerability (CWE-125). This flaw allows an authorized attacker to perform a denial of service attack over a network. No specific software versions, root causes, or exploit links are provided i...

CVE-2026-83658

A vulnerability exists in Windows Error Reporting due to improper access control . This flaw allows an authorized attacker to perform a local information disclosure . The impact is classified as high regarding confidentiality, with a CVSS 3.1 base score of 5.5. Remediation is available via an off...

CVE-2026-83644

A Use after free vulnerability in the Windows Audio Service allows an authorized attacker to achieve local privilege escalation . The vulnerability impacts the service's ability to manage memory safely, potentially allowing a low-privileged user to gain higher system privileges. Remediation is av...

CVE-2026-83578

A critical integer underflow (wrap or wraparound) vulnerability exists in Windows PowerShell . This flaw allows an unauthorized attacker to achieve remote code execution over a network. According to the provided metrics, the vulnerability has a CVSSv3.1 score of 9.8 , indicating high severity for...

CVE-2026-83583

A vulnerability in the Windows Geotag Broker involves improper access control , which allows an authorized attacker to achieve local privilege elevation . The impact of this vulnerability is classified as High , with potential consequences for confidentiality, integrity, and availability. Officia...

CVE-2026-83516

An out-of-bounds read vulnerability exists in the Windows Local Security Authority Subsystem Service (LSASS) . This flaw allows an unauthorized attacker to perform a denial of service attack over a network. While the specific root cause and affected versions are not detailed in the provided docum...

CVE-2026-83641

A heap-based buffer overflow vulnerability exists in Windows Media . This flaw allows an authorized attacker to achieve local privilege escalation . The documents do not provide specific details regarding the affected component, underlying root cause, or practical exploit paths. Remediation invol...

CVE-2026-83521

The Windows IKE Extension is affected by an out-of-bounds read vulnerability (CVE-2026-83521 ). This flaw allows an authorized attacker to perform an information disclosure over a network. The vulnerability is associated with CWE-125 . While the specific component or file is not detailed in the p...

CVE-2026-83571

A null pointer dereference vulnerability exists in the Windows Audio Service . This flaw allows an authorized attacker to perform a local information disclosure . The CVSS 3.1 score is 5.5 (Medium) , indicating a local attack vector with low complexity requiring low privileges. Exploitation detai...