CVE-2026-83798
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.
Risk Assessment
An authorized attacker could impersonate trusted components, potentially compromising system integrity.
Recommendation
Apply the latest Windows security updates.
Other vulnerabilities in Windows Update Stack
See all- CVE-2026-81963HighActively exploited
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
- CVE-2026-96218Medium
Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.
- CVE-2021-26889High
Elevation of privilege vulnerability in Windows Update Stack. Allows an attacker to gain elevated privileges.
- CVE-2021-1729High
Elevation of privilege vulnerability in Windows Update Stack Setup. An attacker could exploit it to gain elevated privileges on the system.
- CVE-2020-1110High
An elevation of privilege vulnerability in Windows Update Stack due to improper handling of objects in memory. An attacker could run arbitrary code in kernel mode, install programs, view, change or delete data, or create new accounts with full user rights.
- CVE-2020-1109High
Elevation of privilege vulnerability in Windows Update Stack. An attacker who logs on can run a specially crafted application to execute code in kernel mode, allowing installation of programs, data modification, or creation of accounts with full user rights.
Original NVD description (English source)
Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS