CVE-2026-102211
HighCVSS 7.0Summary
Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could exploit this vulnerability to gain higher privileges, potentially leading to a breach of virtualization-based security isolation.
Recommendation
Immediately install security updates for Windows and restrict local access to trusted users.
Other vulnerabilities in Windows Virtualization-Based Security (VBS) Enclave
See all- CVE-2026-88074High
Integer overflow or wraparound vulnerability in the Windows Virtualization-Based Security (VBS) Enclave. An authorized attacker can elevate privileges locally.
- CVE-2026-20935Medium
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally.
- CVE-2026-20876Medium
A heap-based buffer overflow vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
- CVE-2026-20819Medium
An untrusted pointer dereference vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS