CVE-2026-83793
HighCVSS 7.0Summary
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit links to manipulate system files, leading to privilege escalation.
Recommendation
Install security patches and restrict user privileges to system services.
Other vulnerabilities in Windows Update Orchestrator Service
See all- CVE-2026-97812High
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83930High
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83886High
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS