CVE-2026-83901

Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

Buffer over-read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

A use after free in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

A use after free in the Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Exposure of sensitive system information to an unauthorized control sphere in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

A vulnerability in the Windows Win32 Kernel Subsystem allows exposure of sensitive system information to an unauthorized control sphere. An authorized attacker can disclose information locally.

A heap-based buffer overflow in the Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges via a physical attack.

Exposure of sensitive system information to an unauthorized control sphere in the Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.