Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
CVE-2026-83669
CVSS base score
7.8 (v3.1)
Severity
HIGH
Attack vector
Local
Weakness
CWE-908
Last modified
October 29, 2026
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
microsoft windows 10 1607
microsoft windows 10 1809
microsoft windows 10 21h2
microsoft windows 10 22h2
microsoft windows 11 23h2
microsoft windows 11 24h2
microsoft windows 11 25h2
microsoft windows 11 26h1
microsoft windows 11 26h2
microsoft windows server 2016
References
- msrc.microsoft.com Patch, Vendor Advisory