CVE-2026-83637
HighCVSS 7.8Summary
Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
Risk Assessment
Kernel memory disclosure and privilege escalation by a local attacker could compromise system confidentiality and integrity.
Recommendation
Apply Microsoft updates for kernel-mode drivers and restrict loading of unsigned drivers.
Other vulnerabilities in Windows Kernel-Mode Drivers
See all- CVE-2026-96915High
Integer overflow or wraparound in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
- CVE-2026-96849Medium
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
- CVE-2026-96247Medium
Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
- CVE-2026-85871High
Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
- CVE-2026-85857Medium
Insertion of sensitive information into log files in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
- CVE-2026-83837High
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
- CVE-2026-83834High
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
- CVE-2026-83568High
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
- CVE-2026-69971Medium
Incorrect authorization in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.
- CVE-2026-40408High
A use after free vulnerability in Windows Kernel-Mode Drivers allows an authorized attacker to locally elevate privileges.
Original NVD description (English source)
Out-of-bounds read in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS