Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5755 articles · 234019 vulns · 35/41 feeds (7d)
← Back to list
7.8
CVE-2026-83498PATCHED
microsoft · windows 11 version 23h2

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Description

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Affected Products

VendorProductVersions
microsoftwindows 11 version 23h210.0.22631.0, 10.0.22631.0, 10.0.26100.0, 10.0.26200.0, 10.0.28000.0, 10.0.26100.0, 10.0.26100.0

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
microsoftmicrosoft windows server 2012 r2cert_advisory90%
microsoftmicrosoft windowscert_advisory90%

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83498(vendor-advisory, patch)

Related News (5 articles)

Tier E
Reddit r/netsec11h ago
Playing It SFAPE: Code Execution in Isolated User Mode
→ No new info (linked only)
Tier B
BSI Advisories34d ago
[NEU] [kritisch] Microsoft Windows: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB34d ago
CVE-2026-83498 | Microsoft Windows up to Server 2025 Enclave privileges management
→ No new info (linked only)
Tier C
Cisco Talos34d ago
Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities
→ No new info (linked only)
Tier A
Microsoft MSRC35d ago
CVE-2026-83498 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.17.8 HIGH
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA KEV❌ No
Actively exploited❌ No
Patch available
10.0.22631.758210.0.26100.944510.0.26200.944510.0.28000.295410.0.26100.33438
CWECWE-822
PublishedSep 8, 2026
Last enriched35d ago
Trending Score52
Source articles5
Independent5
Info Completeness3/14
Missing: vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-96951EXPKEV
Windows Shell Security Feature Bypass Vulnerability
Trending: 132
HIGHCVE-2026-85880EXPKEV
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Trending: 82
HIGHCVE-2026-81963EXPKEV
Windows Update Stack Elevation of Privilege Vulnerability
Trending: 81
CRITICALCVE-2026-88131
Microsoft Dataverse Remote Code Execution Vulnerability
Trending: 64
CRITICALCVE-2026-77900
Azure App Service Remote Code Execution Vulnerability
Trending: 64

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Sep 8, 2026
Discovered by ZDM
Sep 8, 2026
Patch Available
Sep 25, 2026