CVE-2026-83785
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
Risk Assessment
An attacker could exploit the flaw to gain higher privileges, potentially leading to system compromise.
Recommendation
Install security patches and restrict user privileges to COM+ services.
Other vulnerabilities in Windows COM+ Event System Service
See all- CVE-2022-41033HighActively exploited
A vulnerability in the Windows COM+ Event System Service allows for elevation of privilege. Technical details are not provided in the description.
- CVE-2026-83830High
Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS