Main Vulnerability Database Vulnerabilities #VU154762

Missing Authorization in Microsoft Windows and Windows Server - CVE-2026-83568

Published: October 14, 2026

Vulnerability identifier: #VU154762

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-83568

CWE-ID: CWE-862

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges and execute code in the security context of the NT AUTHORITYNetwork Service account.

The vulnerability exists due to missing authorization in Windows Kernel-Mode Drivers when accessing the drivers locally. A local user can exploit the missing authorization to escalate privileges and execute code in the security context of the NT AUTHORITYNetwork Service account.

Affected software

Microsoft Windows
Windows Server

How to mitigate CVE-2026-83568

Install security update from vendor's website.

Microsoft Windows - addressed in versions 11 24H2 10.0.26100.9711, 11 25H2 10.0.26200.9711, 11 26H1 10.0.28000.3231
Windows Server - update to 2025 10.0.26100.33650

External References

Related Security Bulletins