CVE-2026-83932
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.
Risk Assessment
The attack can allow privilege escalation, potentially leading to full system compromise.
Recommendation
Apply security patches from the vendor and monitor Group Policy activity.
Other vulnerabilities in Windows Group Policy
See all- CVE-2026-100217High
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.
- CVE-2026-69717High
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.
- CVE-2026-50391High
Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.
- CVE-2023-36889Medium
A vulnerability in the Windows Group Policy security feature allows for security mechanism bypass. This could lead to unauthorized access to system resources.
- CVE-2022-41086Medium
Windows Group Policy Elevation of Privilege Vulnerability.
- CVE-2022-37992High
A vulnerability in Windows Group Policy allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Original NVD description (English source)
Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS