NetSight
high7.8

CVE-2026-83498

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Impact

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Affected products

VendorProductAffected versions
MicrosoftWindows 11 23h2
before 10.0.22631.7582
MicrosoftWindows 11 24h2
before 10.0.26100.9445
MicrosoftWindows 11 25h2
before 10.0.26200.9445
MicrosoftWindows 11 26h1
before 10.0.28000.2954
MicrosoftWindows Server 2025
before 10.0.26100.33438

Weakness classification

References