CVE-2026-83750
HighCVSS 7.0Summary
Time-of-check time-of-use (TOCTOU) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally. The flaw stems from a race condition during resource checking and use.
Risk Assessment
An attacker with valid credentials can locally elevate privileges, potentially leading to system compromise. Windows systems using the error reporting service are at risk.
Recommendation
Immediately install Microsoft security updates for Windows Error Reporting. It is also recommended to limit local account privileges to the necessary minimum.
Other vulnerabilities in Windows Error Reporting
See all- CVE-2026-97798High
Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- CVE-2026-85800High
A heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- CVE-2026-85354High
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- CVE-2026-83916High
Double free in Windows Error Reporting allows an authorized attacker to execute code locally.
- CVE-2026-83840High
Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- CVE-2026-83826High
Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- CVE-2026-83758High
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.
- CVE-2026-83715High
Missing authentication for a critical function in Windows Error Reporting allows an authorized attacker to perform tampering locally.
- CVE-2026-83689High
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
- CVE-2026-83669High
Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS