Windows Virtualization-Based Security (VBS) Enclave vulnerabilities
8 known CVE vulnerabilities in Windows Virtualization-Based Security (VBS) Enclave, translated and rated.
- CVE-2026-88074High
Integer overflow or wraparound vulnerability in the Windows Virtualization-Based Security (VBS) Enclave. An authorized attacker can elevate privileges locally.
- CVE-2026-70097Medium
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.
- CVE-2026-102211High
Use after free in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
- CVE-2026-23670Medium
An untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.
- CVE-2026-20935Medium
Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally.
- CVE-2026-20876Medium
A heap-based buffer overflow vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
- CVE-2026-20819Medium
An untrusted pointer dereference vulnerability in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.
- CVE-2025-53717High
A vulnerability in Windows Virtualization-Based Security (VBS) Enclave involves reliance on untrusted inputs in a security decision. This allows an authorized attacker to elevate privileges locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

