CVE-2026-83914

HighCVSS 8.1

Published: 13/10/2026(UTC)Updated: 13/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Summary

Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.

Risk Assessment

A remote attacker could execute arbitrary code, potentially leading to system compromise.

Recommendation

Install the latest Windows and Microsoft XML security updates.

Other vulnerabilities in Microsoft XML

CVE-2026-83935Critical
Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.
CVE-2026-57097Medium
In Microsoft XML, there is an untrusted search path vulnerability. An unauthorized attacker can bypass a security feature through a physical attack.

Original NVD description (English source)

Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS