CVE-2026-83587
HighCVSS 7.8Summary
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
Risk Assessment
This flaw could allow a local attacker to escalate privileges and potentially execute code in a system context.
Recommendation
Immediately apply Microsoft patches for Windows Core Messaging and monitor for suspicious local activity.
Other vulnerabilities in Windows Core Messaging
See all- CVE-2026-69918High
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
- CVE-2026-70584High
Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
- CVE-2026-70583High
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS