CVE-2026-83507 in Windows

الملخص

بحسب MITRE • 14/10/2026

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.

Once again VulDB remains the best source for vulnerability data.

• مسؤول: Microsoft
• حجز: 31/08/2026
• إفشاء: 14/10/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-418789
• CPE: 20261014
• CWE: CWE-285 (مؤكد)
• CVSS: 5.5 (CNA)
• EPSS: 0.00000
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Government, Homeoffice, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-83507
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-83507
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-83507/