CVE-2026-83xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
903 records · Page 1 of 10
Improper link resolution before file access ('link following') in Windows Resilient File System (ReFS) Deduplication Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
UpdatedHeap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
UpdatedMissing authentication for critical function in Windows Cloud Files Mini Filter Driver allows an authorized attacker to perform tampering locally.
UpdatedStack-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unauthorized attacker to deny service over a network.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedSubstance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
UpdatedSubstance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
UpdatedAdobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction.
UpdatedSubstance3D - Modeler is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
UpdatedSubstance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
UpdatedColdFusion is affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain limited read and write access. The vulnerable component is restricted to an administrative network zone by default. Exploitation of this issue does not require user interaction. Scope is changed.
UpdatedAdobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.
UpdatedSubstance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
UpdatedAdobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this issue by manipulating the DOM environment to execute malicious JavaScript within the context of the victim's browser. Exploitation of this issue requires user interaction in that a victim must visit a crafted webpage. Scope is changed.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
UpdatedBuffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
UpdatedBuffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
UpdatedImproper neutralization of special elements used in a command ('command injection') in Microsoft Azure CLI allows an authorized attacker to execute code over a network.
UpdatedMissing authorization in Azure Event Grid allows an authorized attacker to perform spoofing over a network.
UpdatedImproper neutralization of input during web page generation ('cross-site scripting') in Azure Portal allows an unauthorized attacker to perform spoofing over a network.
UpdatedHeap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
UpdatedImproper access control in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
UpdatedExposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.
UpdatedMissing authorization in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedMissing authorization in Entra ID allows an authorized attacker to elevate privileges over a network.
UpdatedUse after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
UpdatedUntrusted pointer dereference in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
Updated- CVE-2026-83938: Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability 10.0 Critical
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.
Updated Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.
UpdatedStack-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
UpdatedImproper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.
UpdatedHeap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
UpdatedUse after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.
UpdatedOut-of-bounds write in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to execute code over a network.
UpdatedImproper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.
UpdatedImproper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.
UpdatedUse of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.
UpdatedUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedRelative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Microsoft Internet Messaging API allows an authorized attacker to execute code locally.
UpdatedInteger overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows ALPC allows an authorized attacker to elevate privileges locally.
UpdatedDouble free in Windows Error Reporting allows an authorized attacker to execute code locally.
UpdatedUse after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Microsoft XML allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds write in RPC Runtime allows an unauthorized attacker to execute code over a network.
UpdatedExposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
UpdatedRelease of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.
UpdatedExposure of sensitive system information to an unauthorized control sphere in Windows Hello allows an authorized attacker to disclose information locally.
UpdatedIncorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
UpdatedExposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.
UpdatedOut-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
UpdatedHeap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
UpdatedImproper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
UpdatedExposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
UpdatedHeap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.
UpdatedExposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally.
UpdatedOut-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
UpdatedStack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
UpdatedRelease of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.
Updated