CVE-2026-83501
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
Risk Assessment
The risk involves potential disclosure of data processed within the VBS enclave, which could compromise the confidentiality of information protected by virtualization.
Recommendation
It is recommended to install the latest Windows security updates that address this vulnerability.
Other vulnerabilities in Windows VBS Enclave
See all- CVE-2026-83498High
Vulnerability involving untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave. Allows an authorized attacker to elevate privileges locally.
- CVE-2026-32220Medium
An improper access control vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
- CVE-2026-20938High
An untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS