CVE-2026-83769
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
A use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker with local access could exploit this to escalate privileges, potentially resulting in system takeover.
Recommendation
Immediately install security updates for OpenSSH for Windows.
Other vulnerabilities in OpenSSH for Windows
See all- CVE-2026-97816Critical
OpenSSH for Windows is affected by a use after free vulnerability. This allows an unauthorized attacker to execute code over a network.
- CVE-2026-88157High
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
- CVE-2026-83871High
Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
- CVE-2026-83754High
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
- CVE-2026-70163High
A vulnerability in OpenSSH for Windows involves allocation of resources without limits or throttling. An unauthenticated attacker can cause a denial of service over the network.
- CVE-2026-69397High
A use-after-free vulnerability in OpenSSH for Windows allows an unauthorized attacker to execute code over a network. The issue stems from using freed memory.
Original NVD description (English source)
Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS