CVE-2026-83797

HighCVSS 8.8/10Last modified Oct 16, 2026

Description

Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Oct 13, 2026
Last modified
Oct 16, 2026
NVD status
Undergoing Analysis

Related CVEs from 2026

CVE-2026-837985.5Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.CVE-2026-83806.5The Frontend File Manager Plugin WordPress plugin through 23.6 does not properly verify ownership of every targeted post before permanent deCVE-2026-838015.4Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.37 and 3.1.8, a user with extras.add_relationship or extCVE-2026-838037.7Sentry is an error tracking and performance monitoring tool. From 23.11.0 until 26.7.0, Sentry instances with the relocation feature enabledCVE-2026-838056.4Nautobot is a Network Source of Truth and Network Automation Platform. From 3.0.0 until 3.1.8, the generic ApprovalWorkflowStageResponse creCVE-2026-83815.4A broken access control vulnerability exists in the TeamViewer DEX Platform (On‑Premises) prior version 9.2. Certain backend API endpoints dCVE-2026-838133.1Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.names.dns.DNSDatagramProCVE-2026-83825.3The Advanced Custom Fields (ACF®) plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 6.8.1. ThCVE-2026-838267.8Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.CVE-2026-838277.0Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.CVE-2026-838287.8Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.CVE-2026-838297.8Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.
CVE-2026-83797: High severity, CVSS 8.8 | Vulnix