CVE-2026-83874: Windows Event Tracing Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE archive
October 2026
Browse CVE records published in October 2026, with severity, affected products, CWE, KEV, and source-backed vulnerability context.
Showing 50 of 7550 matching CVEs · Page 1 of 151.
CVE-2026-83863: Servicing Stack Updates Elevation of Privilege Vulnerability
Heap-based buffer overflow in Servicing Stack Updates allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83861: Windows Remote Desktop Protocol Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83860: Windows GDI Denial of Service Vulnerability
Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83859: Windows NTFS Elevation of Privilege Vulnerability
Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83857: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83856: Windows Event Logging Service Remote Code Execution Vulnerability
Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83850: Microsoft Windows Search Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83845: Windows Internet (wininet.dll) Spoofing Vulnerability
Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83841: Windows Win32k Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83840: Windows Error Reporting Elevation of Privilege Vulnerability
Weak authentication in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83837: Windows Kernel-Mode Drivers Elevation of Privilege Vulnerability
Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83835: Windows Common Log File System Driver Information Disclosure Vulnerability
Buffer over-read in Windows Common Log File System Driver allows an authorized attacker to disclose information locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83830: Windows COM+ Event System Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83829: Microsoft Windows Search Component Elevation of Privilege Vulnerability
Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83797: Windows Partition Management Driver Remote Code Execution Vulnerability
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83795: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83794: Windows Portable Device MTP Driver Information Disclosure Vulnerability
Out-of-bounds read in Windows Portable Device MTP Driver allows an authorized attacker to disclose information locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83792: Windows Device Install Service Elevation of Privilege Vulnerability
Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83791: Windows Virtual Input Elevation of Privilege Vulnerability
Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83790: Windows Hello Elevation of Privilege Vulnerability
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83789: Windows SMB Client Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows SMB Client allows an unauthorized attacker to elevate privileges over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83788: Windows rndismp6.sys Information Disclosure Vulnerability
Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-105106: Koha authenticated OS command injection in tools/scheduler.pl via the jobid parameter when deleting a scheduled task
Koha is vulnerable to OS command injection in the Task Scheduler deletion path. The tools/scheduler.pl handler accepts the jobid request parameter for op=cud-delete and passes it to C4::Scheduler::remove_at_job without validating it. Schedule::At::remove substitutes the supplied job ID into an atrm command string without quoting or escaping it and executes the command through a single-argument system() call, which invokes the shell. An authenticated staff user with the tools => schedule_tasks permission can therefore execute arbitrary operating-system commands as the Koha web/application user by supplying shell metacharacters in jobid. The issue is fixed in Koha 24.11.20, 25.05.15, 25.11.09, and 26.05.04, and in the 26.11 development branch.
Published Oct 14, 2026 · Updated Oct 14, 2026
CVE-2026-83786: Windows NTFS Information Disclosure Vulnerability
Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83781: Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
Improper null termination in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83785: Windows COM+ Event System Service Elevation of Privilege Vulnerability
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83783: Windows Management Instrumentation Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83777: Windows Bluetooth Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Bluetooth Service allows an unauthorized attacker to elevate privileges over an adjacent network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83778: Microsoft Internet Messaging API Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Internet Messaging API allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83774: Windows Win32 Kernel Subsystem Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83773: Windows MIDI Service Module Information Disclosure Vulnerability
Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83771: Windows Camera Frame Server Monitor Elevation of Privilege Vulnerability
Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83770: Windows Text Shaping Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83767: Windows Installer Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83766: Windows Hyper-V Security Feature Bypass Vulnerability
Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83763: Windows Input System Elevation of Privilege Vulnerability
Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83764: Windows Clipboard User Service Information Disclosure Vulnerability
Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83765: Windows DWM Core Library Information Disclosure Vulnerability
Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83762: Win32k Elevation of Privilege Vulnerability
Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83757: Win32k Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83756: Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83755: Win32k Information Disclosure Vulnerability
Use of uninitialized resource in Windows Win32K allows an authorized attacker to disclose information locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83752: Windows Installer Elevation of Privilege Vulnerability
Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83751: Windows MIDI Service Module Elevation of Privileges Vulnerability
Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83750: Windows Error Reporting Elevation of Privilege Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83747: Windows Error Reporting Information Disclosure Vulnerability
Out-of-bounds read in Windows Error Reporting allows an authorized attacker to disclose information locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83737: Windows NTFS Information Disclosure Vulnerability
Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83735: Windows Kernel Elevation of Privilege Vulnerability
Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026
CVE-2026-83736: Windows Kernel Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
Published Oct 13, 2026 · Updated Oct 14, 2026