NetSight
high8.8

CVE-2026-108471

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Impact

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Affected products

VendorProductAffected versions
MicrosoftWindows Server 2019
from 10.0.17763.0 before 10.0.17763.9376
MicrosoftWindows 10 Version 1809
from 10.0.17763.0 before 10.0.17763.9376
MicrosoftWindows Server 2019 (Server Core Installation)
from 10.0.17763.0 before 10.0.17763.9376
MicrosoftWindows 10 1809
before 10.0.17763.9376
MicrosoftWindows Server 2019
before 10.0.17763.9376

Weakness classification

References