CVE-2026-88074
HighCVSS 7.8Summary
Integer overflow or wraparound vulnerability in the Windows Virtualization-Based Security (VBS) Enclave. An authorized attacker can elevate privileges locally.
Risk Assessment
An attacker with valid credentials can exploit the integer overflow to escalate local privileges, potentially compromising the VBS enclave isolation.
Recommendation
Apply the latest Microsoft security updates for Windows and restrict local access to trusted users.
Other vulnerabilities in Windows Virtualization-Based Security (VBS) Enclave
See all- CVE-2026-102211High
Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
- CVE-2026-20935Medium
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally.
- CVE-2026-20876Medium
A heap-based buffer overflow vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
- CVE-2026-20819Medium
An untrusted pointer dereference vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
Original NVD description (English source)
Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS