Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-83658 | medium | 5.5 | No | Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83659 | high | 7.8 | No | Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate priv... | 2026-10-29 |
| CVE-2026-83654 | high | 7.8 | No | Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges l... | 2026-10-29 |
| CVE-2026-83657 | medium | 5.5 | No | Weak authentication in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally. | 2026-10-29 |
| CVE-2026-83651 | high | 7.5 | No | Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network. | 2026-10-29 |
| CVE-2026-83680 | high | 7.0 | No | Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83682 | high | 7.0 | No | Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83650 | high | 7.8 | No | Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83649 | medium | 6.5 | No | Out-of-bounds read in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a networ... | 2026-10-29 |
| CVE-2026-83923 | high | 8.8 | No | Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. | 2026-10-29 |
| CVE-2026-83648 | medium | 6.5 | No | Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network. | 2026-10-29 |
| CVE-2026-83846 | high | 7.0 | No | Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83847 | high | 7.8 | No | Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83863 | high | 7.8 | No | Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83868 | high | 7.0 | No | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth Driver allows an authoriz... | 2026-10-29 |
| CVE-2026-83875 | medium | 5.5 | No | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83877 | high | 7.8 | No | Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally. | 2026-10-29 |
| CVE-2026-83884 | medium | 5.5 | No | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83887 | medium | 5.5 | No | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 2026-10-29 |
| CVE-2026-83892 | medium | 5.5 | No | Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally. | 2026-10-29 |