AI and data stack advisories

Severe, 6 weeks977Projects326

977 severe, 6 weeks · 326 projects

MicrosoftCVE-2026-83849

Microsoft Windows Hello: out-of-bounds read

Microsoft

CVE-2026-83849 · Published Oct 13, 2026 · updated Oct 29, 2026

Medium5.5
Fix: upgrade to 10.0.19044.7807 or later (7 fixed versions below)
Microsoft advisory

Out-of-bounds read in Windows Hello allows an authorized attacker to disclose information locally.

Affected versions

PackageAffectedFixed in
Windows 10 Version 21H2
Product
>= 10.0.19044.0, < 10.0.19044.780710.0.19044.7807
Windows 10 Version 22H2
Product
>= 10.0.19045.0, < 10.0.19045.780710.0.19045.7807
Windows 11 Version 23H2
Product
>= 10.0.22631.0, < 10.0.22631.765210.0.22631.7652
Windows 11 Version 24H2
Product
>= 10.0.26100.0, < 10.0.26100.971110.0.26100.9711
Windows 11 Version 25H2
Product
>= 10.0.26200.0, < 10.0.26200.971110.0.26200.9711
Windows 11 Version 26H2
Product
>= 10.0.26300.0, < 10.0.26300.971110.0.26300.9711
Windows 11 version 23H2
Product
>= 10.0.22631.0, < 10.0.22631.765210.0.22631.7652
Windows 11 version 26H1
Product
>= 10.0.28000.0, < 10.0.28000.323110.0.28000.3231
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-125

More Microsoft advisories

All Microsoft
High 8.0Oct 13Microsoft SQL Server: stack buffer overflowCVE-2026-96956fixed in 14.0.2140.2 +7High 8.8Oct 13Microsoft SQL Server: heap buffer overflowCVE-2026-94512fixed in 14.0.2140.2 +7Medium 6.4Oct 13Microsoft SQL Server: heap buffer overflowCVE-2026-88085fixed in 14.0.2140.2 +7Medium 5.3Oct 13Microsoft SQL Server: out-of-bounds readCVE-2026-88086fixed in 15.0.2200.2 +5High 7.0Oct 13Microsoft SQL Server: integer overflowCVE-2026-88088fixed in 15.0.2200.2 +5Medium 6.7Oct 13Microsoft SQL Server: heap buffer overflowCVE-2026-88089fixed in 14.0.2140.2 +7