CVE-2026-83847 — Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.
CVSS 7.8
Cyber Threat Dashboard
Cybersecurity watch: alerts, vulnerabilities, news and tools to protect yourself.
6837Items
5086Last 7 days
0Today
2967Critical + high
17/10/2026 03:49Last collection
CVE-2026-83846 — Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privil…
Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges locally.
CVSS 7
NVD · CVE récentesCWE-416
CVE-2026-83845 — Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoo…
Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.
CVSS 8.4
NVD · CVE récentesCWE-290
CVE-2026-83844 — Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.
Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network.
CVSS 8.1
NVD · CVE récentesCWE-125
CVE-2026-83843 — Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny se…
Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.
CVSS 7.5
NVD · CVE récentesCWE-125
CVE-2026-83842 — Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
CVSS 7
NVD · CVE récentesCWE-415
CVE-2026-83841 — Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K…
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVSS 7
NVD · CVE récentesCWE-362
CVE-2026-83840 — Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVSS 7.8
NVD · CVE récentesCWE-1390
CVE-2026-83839 — Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate…
Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.
CVSS 7
NVD · CVE récentesCWE-367
CVE-2026-83838 — Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elev…
Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.
CVSS 8
NVD · CVE récentesCWE-191
CVE-2026-83837 — Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges lo…
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
CVSS 7.8
NVD · CVE récentesCWE-441
CVE-2026-83836 — Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.
CVSS 7.8