CVE-2026-83904 HID Parser Library Information Disclosure Vulnerability
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83904 US
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83904 US
Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-85903 US
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85902 US
Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85901 US
Use after free in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-85872 US
Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83903 US
Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83900 US
Improper privilege management in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83899 US
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-83897 US
Release of invalid pointer or reference in DNS Server allows an authorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83889 US
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83873 US
Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83877 US
Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.
EPSS < 0.01 CVE-2026-83895 US
Out-of-bounds read in Windows Aggregated Data Platform Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83870 US
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83898 US
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83884 US
Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83887 US
Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83881 US
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83883 US
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83874 US
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83863 US
Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83861 US
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-83860 US
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83859 US
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83857 US
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83856 US
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83850 Microsoft US
Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.
EPSS < 0.01 CVE-2026-83845 US
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83841 US
Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83840 US
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83837 US
Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-83835 US
Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83830 US
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83829 Microsoft US
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83797 US
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
EPSS 0.01 CVE-2026-83795 US
Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83794 US
Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83792 US
Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83791 US
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83790 US
Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.
EPSS 0.01 CVE-2026-83789 US
Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
EPSS 0.01 CVE-2026-83788 US
Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-83786 US
Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83781 US
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83785 US
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83783 US
Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.
EPSS 0.01 CVE-2026-83777 US
Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83778 Microsoft US
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-83774 US
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
EPSS 0.01 CVE-2026-83773 US
Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.
EPSS 0.01 CVE-2026-83771 US
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
EPSS 0.01 CVE-2026-83770 US
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83767 US
Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.
EPSS < 0.01 CVE-2026-83766 US
Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83763 US
Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83764 US
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
EPSS < 0.01 CVE-2026-83765 US
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83762 US
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83757 US
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
EPSS < 0.01 CVE-2026-83756 US