AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

MicrosoftCVE-2026-83836

Microsoft Windows Event Tracing: heap buffer overflow

Microsoft

CVE-2026-83836 · Published Oct 13, 2026 · updated Oct 27, 2026

High7.8
Fix: upgrade to 10.0.14393.9612 or later (10 fixed versions below)
Microsoft advisory

Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code locally.

Affected versions

PackageAffectedFixed in
Windows 10 Version 1607
Product
>= 10.0.14393.0, < 10.0.14393.961210.0.14393.9612
Windows 10 Version 1809
Product
>= 10.0.17763.0, < 10.0.17763.937610.0.17763.9376
Windows 10 Version 21H2
Product
>= 10.0.19044.0, < 10.0.19044.780710.0.19044.7807
Windows 10 Version 22H2
Product
>= 10.0.19045.0, < 10.0.19045.780710.0.19045.7807
Windows 11 Version 23H2
Product
>= 10.0.22631.0, < 10.0.22631.765210.0.22631.7652
Windows 11 Version 24H2
Product
>= 10.0.26100.0, < 10.0.26100.971110.0.26100.9711
Windows 11 Version 25H2
Product
>= 10.0.26200.0, < 10.0.26200.971110.0.26200.9711
Windows 11 Version 26H2
Product
>= 10.0.26300.0, < 10.0.26300.971110.0.26300.9711
Windows 11 version 23H2
Product
>= 10.0.22631.0, < 10.0.22631.765210.0.22631.7652
Windows 11 version 26H1
Product
>= 10.0.28000.0, < 10.0.28000.323110.0.28000.3231
Windows Server 2012
Product
>= 6.2.9200.0, < 6.2.9200.264346.2.9200.26434
Windows Server 2012 (Server Core installation)
Product
>= 6.2.9200.0, < 6.2.9200.264346.2.9200.26434
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-122, CWE-191

More Microsoft advisories

All Microsoft