CVE-2026-83676CWE-122CWE-191

CVE-2026-83676

High · published October 13, 2026

CVSS v3.1

7.0

EPSS

Percentile

15.7

In the wild

Unconfirmed

What it is

Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.

The record

Technical detail

CVSS v3.1: 7.0 · HIGH
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00252 · 15.7th percentile
Weaknesses: CWE-122 · Heap-based Buffer Overflow; CWE-191 · Integer Underflow (Wrap or Wraparound)
Published: 2026-10-13T23:20Z

References (1)

EPSS history

Timeline