CVE-2026-83850
HighCVSS 7.8Summary
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could exploit this to gain elevated privileges and take control of the system.
Recommendation
Install the latest security patches and restrict access to the search component to trusted users.
Other vulnerabilities in Windows Search Component
See all- CVE-2026-96911High
Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
- CVE-2026-69453Medium
A missing authorization vulnerability in the Microsoft Windows Search Component allows an authorized attacker to perform tampering locally.
Original NVD description (English source)
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS