CVE-2026-83xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
903 records · Page 3 of 10
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.
UpdatedImproper control of generation of code ('code injection') in Windows Encrypting File System (EFS) allows an authorized attacker to execute code over a network.
UpdatedHeap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.
UpdatedHeap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
UpdatedUse of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
UpdatedHeap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
UpdatedHeap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Installer allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
UpdatedTime-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
UpdatedOut-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.
UpdatedAbsolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
UpdatedMemory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without checking that the bytes have arrived. A single ~14-byte frame therefore commits as much memory as it
UpdatedA security vulnerability has been detected in invoiceninja Invoice Ninja up to 5.13.26. This vulnerability affects the function Purify::isHostSafe of the file app/Services/Pdf/Purify.php of the component invoices Endpoint. The manipulation of the argument notes leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be u
Updated- CVE-2026-83743: invoiceninja Invoice Ninja Vendor Portal Profile Update profile authorization 5.3 Medium
A weakness has been identified in invoiceninja Invoice Ninja up to 5.13.26. This affects an unknown part of the file /vedor/profile/ of the component Vendor Portal Profile Update. Executing a manipulation of the argument vendor_contact can lead to authorization bypass. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. Upgradin
Updated Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an authenticated remote attacker to write one out-of-bounds null byte past the end of a stack buffer by sending a crafted SFTP path. wolfSSH_RealPath() in src/ssh.c appends each path component with a remaining-size bound (outSz - curSz) rather than the full destinat
UpdatedUse after free in Internet Explorer allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Hello allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.
Updated- CVE-2026-83738: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 7.0 High
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
Updated Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
UpdatedHeap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedRelease of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.
UpdatedUse after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
UpdatedImproper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
UpdatedBuffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
UpdatedHeap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
UpdatedUse of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
Updated- CVE-2026-83722: Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability 7.0 High
Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
Updated Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
UpdatedBuffer over-read in Servicing Stack Updates allows an authorized attacker to disclose information locally.
UpdatedUse after free in Windows Installer allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Installer allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
UpdatedMissing authentication for critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.
UpdatedUse of uninitialized resource in Windows HTTP.sys allows an authorized attacker to disclose information locally.
UpdatedOut-of-bounds read in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to disclose information locally.
UpdatedOut-of-bounds write in Windows NTFS allows an authorized attacker to execute code locally.
Updated- CVE-2026-83711: Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability 10.0 Critical
Authorization bypass through user-controlled key in Microsoft Azure Active Directory B2C allows an unauthorized attacker to elevate privileges over a network.
Updated Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.
UpdatedStack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
UpdatedExposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.
UpdatedImproper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows Wi-Fi Driver allows an unauthorized attacker to deny service over an adjacent network.
UpdatedUse after free in Windows Installer allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Now Playing Session Manager allows an authorized attacker to elevate privileges locally.
Updated- CVE-2026-83699: Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability 7.8 High
Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
Updated - CVE-2026-83698: Windows Client-Side Caching (CSC) Service Elevation of Privilege Vulnerability 7.8 High
Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.
Updated Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
Updated- CVE-2026-83696: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 7.0 High
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
Updated Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
Updated- CVE-2026-83694: Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability 7.0 High
Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
Updated Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
UpdatedHeap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
UpdatedUse after free in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
Updated- CVE-2026-83685: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability 6.5 Medium
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network.
Updated - CVE-2026-83683: Windows Encrypting File System (EFS) Information Disclosure Vulnerability 6.5 Medium
Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.
Updated Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
UpdatedWeak authentication in Microsoft PowerToys allows an authorized attacker to perform tampering locally.
UpdatedHeap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.
UpdatedHeap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
UpdatedMissing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over a network.
UpdatedInteger underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.
UpdatedUse after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
UpdatedWeak authentication in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform spoofing over a network.
UpdatedExposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.
UpdatedOut-of-bounds read in Windows Hyper-V allows an authorized attacker to disclose information locally.
Updated- CVE-2026-83670: Function Discovery Service (fdwsd.dll) Information Disclosure Vulnerability 7.5 High
Out-of-bounds read in Function Discovery Service (fdwsd.dll) allows an unauthorized attacker to disclose information over a network.
Updated Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
UpdatedOut-of-bounds read in Windows WLAN Service allows an authorized attacker to disclose information locally.
UpdatedOut-of-bounds read in Active Directory Domain Services allows an authorized attacker to deny service over a network.
Updated- CVE-2026-83666: Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability 7.0 High
Concurrent execution using shared resource with improper synchronization ('race condition') in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
Updated Null pointer dereference in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
Updated- CVE-2026-83664: Windows Portable Device File System Driver Information Disclosure Vulnerability 5.5 Medium
Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.
Updated Uncontrolled Recursion vulnerability in Apache Thrift go bindings. Both Go transports satisfy a read out of a buffered frame and, when that frame yields no payload bytes, read the next frame and call `Read` again instead of looping. A peer produces such a frame for 4 bytes in `TFramedTransport` (a declared size of zero) or 18 bytes in `THeaderTransport` (a header block that fills the frame), so
Updated- CVE-2026-83662: Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) 9.3 Critical
Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compr
Updated Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated- CVE-2026-83660: Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918) 9.9 Critical
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.
Updated Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.
UpdatedImproper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.
UpdatedWeak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.
Updated