CVE-2026-83xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
903 records · Page 2 of 10
Buffer over-read in Windows CD-ROM Driver allows an unauthorized attacker to elevate privileges over a network.
UpdatedOut-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
UpdatedUse after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
Updated- CVE-2026-83885: Windows Virtualization-Based Security (VBS) Enclave Spoofing Vulnerability 5.6 Medium
Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.
Updated Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
UpdatedUse after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
UpdatedConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
UpdatedInteger overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Shell allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
UpdatedHeap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.
UpdatedRelative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
UpdatedIncorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
Updated- CVE-2026-83870: Windows Aggregated Data Platform Service Information Disclosure Vulnerability 5.5 Medium
Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally.
Updated Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.
UpdatedConcurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
UpdatedRelative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.
UpdatedImproper access control in Windows NTFS allows an authorized attacker to disclose information locally.
UpdatedHeap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over an adjacent network.
UpdatedHeap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
UpdatedStack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.
UpdatedUse after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
UpdatedInteger underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.
UpdatedImproper access control in Windows Notification allows an authorized attacker to disclose information locally.
UpdatedUse after free in Windows Hello allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Partition Management Driver allows an unauthorized attacker to elevate privileges over a network.
UpdatedHeap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.
UpdatedUntrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
Updated- CVE-2026-83846: Connected Devices Platform Service (Cdpsvc) Elevation of Privilege Vulnerability 7.0 High
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
Updated Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.
UpdatedOut-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.
Updated- CVE-2026-83843: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability 7.5 High
Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.
Updated Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
UpdatedConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
UpdatedWeak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
UpdatedTime-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
UpdatedInteger underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.
UpdatedImproper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.
Updated- CVE-2026-83835: Windows Common Log File System Driver Information Disclosure Vulnerability 5.5 Medium
Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.
Updated Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
UpdatedDouble free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
UpdatedHeap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.
UpdatedUntrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
UpdatedTwisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.names.dns.DNSDatagramProtocol accepts a UDP DNS response for a pending query when its 16-bit transaction ID matches but does not verify that the response came from the queried host and port. An attacker able to deliver a packet to the resolver's listening port with the correct transa
UpdatedNautobot is a Network Source of Truth and Network Automation Platform. From 3.0.0 until 3.1.8, the generic ApprovalWorkflowStageResponse create endpoint does not enforce approver-group membership, change permission on the object under review, or the one-response-per-user restriction applied by the intended approve and deny actions. A user with only extras.add_approvalworkflowstageresponse can subm
UpdatedSentry is an error tracking and performance monitoring tool. From 23.11.0 until 26.7.0, Sentry instances with the relocation feature enabled unsafely deserialize a legacy database field while importing a user-supplied relocation archive. An authenticated user can craft an archive that causes arbitrary code execution in the import worker process. Self-hosted installations using the default configur
Updated- CVE-2026-83801: Nautobot: Stored cross-site scripting (XSS) in object create/edit form help text 5.4 Medium
Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.37 and 3.1.8, a user with extras.add_relationship or extras.change_relationship permission can store HTML or JavaScript in a Relationship description, and a user with dcim.add_modulefamily or dcim.change_modulefamily permission can store it in a Module Family name. Nautobot assigns these values to form field help_t
Updated Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.
UpdatedOut-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
Updated- CVE-2026-83795: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability 7.5 High
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
Updated Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.
UpdatedImproper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
UpdatedIncorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.
UpdatedImproper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Hello allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.
UpdatedBuffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
UpdatedInsufficient verification of data authenticity in Windows DHCP Server allows an authorized attacker to bypass a security feature locally.
UpdatedGeneration of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.
UpdatedUse after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
UpdatedAbsolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.
UpdatedHeap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.
Updated- CVE-2026-83781: Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability 7.8 High
Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
Updated Use after free in Windows CCFFilter Driver allows an unauthorized attacker to execute code over a network.
UpdatedHeap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.
UpdatedHeap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.
UpdatedOut-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.
UpdatedConcurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
UpdatedExposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
UpdatedExposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
UpdatedA vulnerability was detected in Cobham SATCOM VSAT7090 Maritime Satellite Router up to 20260704. This issue affects the function c_set_reports_decode of the file mail-report.sh of the component JSON Parsing. The manipulation of the argument sender/recipients results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used. The vendor was contact
UpdatedUse after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.
UpdatedHeap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedStack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
UpdatedIncorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.
UpdatedOut-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
UpdatedIncorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.
UpdatedAccess of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.
Updated