CVE-2026-102211
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could exploit this vulnerability to gain higher privileges, potentially leading to a breach of virtualization-based security isolation.
Recommendation
Immediately install security updates for Windows and restrict local access to trusted users.
Other vulnerabilities in Windows Virtualization-Based Security (VBS) Enclave
See all- CVE-2026-88074High
Integer overflow or wraparound vulnerability in the Windows Virtualization-Based Security (VBS) Enclave. An authorized attacker can elevate privileges locally.
- CVE-2026-70097Medium
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.
- CVE-2026-23670Medium
An untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
- CVE-2026-20935Medium
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally.
- CVE-2026-20876Medium
A heap-based buffer overflow vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
- CVE-2026-20819Medium
An untrusted pointer dereference vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
- CVE-2025-53717High
A vulnerability in Windows Virtualization-Based Security (VBS) Enclave involves reliance on untrusted inputs in a security decision. This allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS