Windows Update Orchestrator Service vulnerabilities

4 known CVE vulnerabilities in Windows Update Orchestrator Service, translated and rated.

CVE-2026-97812High
Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83930High
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83886High
Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
CVE-2026-83793High
Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS