CVE-2026-83587
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
Risk Assessment
This flaw could allow a local attacker to escalate privileges and potentially execute code in a system context.
Recommendation
Immediately apply Microsoft patches for Windows Core Messaging and monitor for suspicious local activity.
Other vulnerabilities in Windows Core Messaging
See all- CVE-2026-69918High
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
- CVE-2026-70584High
Access of resource using incompatible type ('type confusion') in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
- CVE-2026-70583High
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS