CVE-2026-83933
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Improper link resolution before file access ('link following') in the Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.
Risk Assessment
A locally authenticated attacker could exploit this flaw to read sensitive data from the file system, potentially resulting in information disclosure.
Recommendation
Promptly apply patches for the Windows Update Orchestrator Service and limit local user privileges to the minimum necessary.
Other vulnerabilities in Windows Update Orchestrator Service
See all- CVE-2026-97812High
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83930High
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83886High
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83793High
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
- CVE-2026-83507Medium
A link following vulnerability exists in Windows Update Orchestrator Service, involving improper link resolution before file access. An authorized attacker can exploit this to disclose information locally.
- CVE-2026-81964Medium
Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.
Original NVD description (English source)
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS