CVE-2026-83881 Windows exFAT File System Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83881 US
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83881 US
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83883 US
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83874 US
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83863 US
Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83861 US
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-83860 US
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83859 US
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83857 US
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83856 US
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83850 Microsoft US
Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.
EPSS < 0.01 CVE-2026-83845 US
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83841 US
Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83840 US
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83837 US
Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-83835 US
Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83830 US
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83829 Microsoft US
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83797 US
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-83795 US
Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83794 US
Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83792 US
Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83791 US
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83790 US
Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-83789 US
Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
EPSS 0.01 CVE-2026-83788 US
Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-83786 US
Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83781 US
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83785 US
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83783 US
Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.
EPSS 0.01 CVE-2026-83777 US
Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83778 Microsoft US
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-83774 US
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-83773 US
Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.
EPSS 0.01 CVE-2026-83771 US
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83770 US
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83767 US
Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.
EPSS < 0.01 CVE-2026-83766 US
Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83763 US
Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83764 US
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83765 US
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83762 US
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83757 US
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83756 US
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83755 US
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83752 US
Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83751 US
Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83750 US
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83747 US
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83737 US
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83735 US
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83736 US
Use after free in Windows Bluetooth Service allows an unauthorized attacker to execute code over an adjacent network.
EPSS < 0.01 CVE-2026-83739 US
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83732 US
Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
EPSS < 0.01 CVE-2026-83728 US
Heap-based buffer overflow in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83725 Microsoft US
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83724 US
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83721 US
Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83720 US
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83718 US
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83717 US