CVE-2026-83886
HighCVSS 7.0Summary
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
A local attacker can exploit this flaw to escalate privileges, potentially leading to system takeover.
Recommendation
It is recommended to immediately install the latest security updates for Windows.
Other vulnerabilities in Windows Update Orchestrator Service
See all- CVE-2026-97812High
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83930High
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83793High
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS