CVE-2026-83790 - Vulnerability Details

- Windows Hello Elevation of Privilege Vulnerability

Description

Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.

Published: 2026-10-13

Score: 7 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The vulnerability is a use‑after‑free bug in the Windows Hello authentication component. It enables an attacker who already has local user access to exploit freed memory and gain elevated privileges. The weakness corresponds to improper resource release (CWE‑416), allowing the attacker to execute code with higher authority on the affected system.

Affected Systems

The flaw affects Microsoft Windows 10 versions 21H2 and 22H2, as well as a range of Windows 11 releases – 23H2, 24H2, 25H2, 26H2, and 26H1. It operates on both x86/x64 and ARM64 architectures, as reflected in the listed CPEs. Any system running these editions without the latest cumulative updates is vulnerable.

Risk and Exploitability

The CVSS score of 7 highlights medium‑to‑high severity, while the EPSS score is currently unavailable and the vulnerability is not yet in the CISA KEV catalog. The attack vector is inferred to be local; an attacker must have authorized user access to the system to trigger the use‑after‑free condition and acquire elevated privileges.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Microsoft

Windows 10 Version 21H2

affected

Version	Status	Constraints
`10.0.19044.0`	affected	< 10.0.19044.7807

Microsoft

Windows 10 Version 22H2

affected

Version	Status	Constraints
`10.0.19045.0`	affected	< 10.0.19045.7807

Microsoft

Windows 11 version 23H2

affected

Version	Status	Constraints
`10.0.22631.0`	affected	< 10.0.22631.7652

Microsoft

Windows 11 Version 23H2

affected

Version	Status	Constraints
`10.0.22631.0`	affected	< 10.0.22631.7652

Microsoft

Windows 11 Version 24H2

affected

Version	Status	Constraints
`10.0.26100.0`	affected	< 10.0.26100.9711

Microsoft

Windows 11 Version 25H2

affected

Version	Status	Constraints
`10.0.26200.0`	affected	< 10.0.26200.9711

Microsoft

Windows 11 version 26H1

affected

Version	Status	Constraints
`10.0.28000.0`	affected	< 10.0.28000.3231

Microsoft

Windows 11 Version 26H2

affected

Version	Status	Constraints
`10.0.26300.0`	affected	< 10.0.26300.9711

Configuration 1 [-]

OR	cpe:2.3:o:microsoft:windows_10_21h2:::::::arm64:*
	cpe:2.3:o:microsoft:windows_10_21h2:::::::x64:*
	cpe:2.3:o:microsoft:windows_10_21h2:::::::x86:*
	cpe:2.3:o:microsoft:windows_10_22h2:::::::arm64:*
	cpe:2.3:o:microsoft:windows_10_22h2:::::::x64:*
	cpe:2.3:o:microsoft:windows_10_22h2:::::::x86:*
	cpe:2.3:o:microsoft:windows_11_23h2:::::::arm64:*
	cpe:2.3:o:microsoft:windows_11_23h2:::::::x64:*
	cpe:2.3:o:microsoft:windows_11_24h2:::::::arm64:*
	cpe:2.3:o:microsoft:windows_11_24h2:::::::x64:*
	cpe:2.3:o:microsoft:windows_11_25h2:::::::arm64:*
	cpe:2.3:o:microsoft:windows_11_25h2:::::::x64:*
	cpe:2.3:o:microsoft:windows_11_26h1:::::::arm64:*
	cpe:2.3:o:microsoft:windows_11_26h1:::::::x64:*
	cpe:2.3:o:microsoft:windows_11_26h2:::::::arm64:*
	cpe:2.3:o:microsoft:windows_11_26h2:::::::x64:*

No data.

Vendor Product Confidence Versions

Microsoft

Windows 10 21h2

100%

Version	Status	Scheme	Platform
`[10.0.19044.0,10.0.19044.7807)`	affected	generic	['32-bit_systems', 'arm64-based_systems', 'x64-based_systems']

Microsoft

Windows 10 22h2

100%

Version	Status	Scheme	Platform
`[10.0.19045.0,10.0.19045.7807)`	affected	generic	['32-bit_systems', 'arm64-based_systems', 'x64-based_systems']

Microsoft

Windows 11 23h2

100%

Version	Status	Scheme	Platform
`[10.0.22631.0,10.0.22631.7652)`	affected	generic	['arm64-based_systems']

Microsoft

Windows 11 23h2

100%

Version	Status	Scheme	Platform
`[10.0.22631.0,10.0.22631.7652)`	affected	generic	['x64-based_systems']

Microsoft

Windows 11 24h2

100%

Version	Status	Scheme	Platform
`[10.0.26100.0,10.0.26100.9711)`	affected	generic	['arm64-based_systems', 'x64-based_systems']

Microsoft

Windows 11 25h2

100%

Version	Status	Scheme	Platform
`[10.0.26200.0,10.0.26200.9711)`	affected	generic	['arm64-based_systems', 'x64-based_systems']

Microsoft

Windows 11 26h1

100%

Version	Status	Scheme	Platform
`[10.0.28000.0,10.0.28000.3231)`	affected	generic	['arm64-based_systems', 'x64-based_systems']

Microsoft

Windows 11 26h2

100%

Version	Status	Scheme	Platform
`[10.0.26300.0,10.0.26300.9711)`	affected	generic	['arm64-based_systems', 'x64-based_systems']

Microsoft

Windows 11 Version 26h2 For Arm64-based Systems

100%

Version	Status	Scheme	Platform
`—`	affected	—	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply the latest Microsoft security update for CVE‑2026‑83790 as listed on the MSRC update guide.
Disable or restrict Windows Hello usage on systems where biometric authentication is not required, reducing the attack surface.
Enforce least‑privilege policies and regularly review account privileges to ensure users do not hold administrative rights unnecessarily.
Monitor authentication logs for irregular Windows Hello activity and investigate any suspicious events.

Generated by OpenCVE AI on October 14, 2026 at 04:41 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00279.

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83790

History

Wed, 28 Oct 2026 20:15:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:o:microsoft:windows_10_21h2:::::::arm64:* cpe:2.3:o:microsoft:windows_10_21h2:::::::x64:* cpe:2.3:o:microsoft:windows_10_21h2:::::::x86:* cpe:2.3:o:microsoft:windows_10_22h2:::::::arm64:* cpe:2.3:o:microsoft:windows_10_22h2:::::::x64:* cpe:2.3:o:microsoft:windows_10_22h2:::::::x86:* cpe:2.3:o:microsoft:windows_11_23h2:::::::arm64:* cpe:2.3:o:microsoft:windows_11_23h2:::::::x64:* cpe:2.3:o:microsoft:windows_11_24h2:::::::arm64:* cpe:2.3:o:microsoft:windows_11_24h2:::::::x64:* cpe:2.3:o:microsoft:windows_11_25h2:::::::arm64:* cpe:2.3:o:microsoft:windows_11_25h2:::::::x64:* cpe:2.3:o:microsoft:windows_11_26h1:::::::arm64:* cpe:2.3:o:microsoft:windows_11_26h1:::::::x64:* cpe:2.3:o:microsoft:windows_11_26h2:::::::arm64:* cpe:2.3:o:microsoft:windows_11_26h2:::::::x64:*

Fri, 23 Oct 2026 19:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Microsoft windows 10 21h2 Microsoft windows 10 22h2 Microsoft windows 11 23h2 Microsoft windows 11 24h2 Microsoft windows 11 25h2 Microsoft windows 11 26h1 Microsoft windows 11 26h2
Vendors & Products		Microsoft windows 10 21h2 Microsoft windows 10 22h2 Microsoft windows 11 23h2 Microsoft windows 11 24h2 Microsoft windows 11 25h2 Microsoft windows 11 26h1 Microsoft windows 11 26h2

Tue, 13 Oct 2026 22:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 13 Oct 2026 19:15:00 +0000

Type	Values Removed	Values Added
Description		Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
Title		Windows Hello Elevation of Privilege Vulnerability
First Time appeared		Microsoft Microsoft windows 10 21h2 Microsoft windows 10 22h2 Microsoft windows 11 23h2 Microsoft windows 11 24h2 Microsoft windows 11 25h2 Microsoft windows 11 26h1 Microsoft windows 11 Version 26h2 For Arm64-based Systems
Weaknesses		CWE-416
CPEs		cpe:2.3:a:microsoft:windows_11_version_26h2_for_arm64-based_systems:::::::: cpe:2.3:o:microsoft:windows_10_21H2:::::::x86:* cpe:2.3:o:microsoft:windows_10_22H2:::::::x64:* cpe:2.3:o:microsoft:windows_11_23H2:::::::arm64:* cpe:2.3:o:microsoft:windows_11_23H2:::::::x64:* cpe:2.3:o:microsoft:windows_11_24H2:::::::arm64:* cpe:2.3:o:microsoft:windows_11_25H2:::::::arm64:* cpe:2.3:o:microsoft:windows_11_26H1:::::::x64:*
Vendors & Products		Microsoft Microsoft windows 10 21h2 Microsoft windows 10 22h2 Microsoft windows 11 23h2 Microsoft windows 11 24h2 Microsoft windows 11 25h2 Microsoft windows 11 26h1 Microsoft windows 11 Version 26h2 For Arm64-based Systems
References		https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83790
Metrics		cvssV3_1 `{'score': 7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}`

Subscriptions

Microsoft Windows 10 21h2 Windows 10 21h2 Windows 10 22h2 Windows 10 22h2 Windows 11 23h2 Windows 11 23h2 Windows 11 24h2 Windows 11 24h2 Windows 11 25h2 Windows 11 25h2 Windows 11 26h1 Windows 11 26h1 Windows 11 26h2 Windows 11 Version 26h2 For Arm64-based Systems

MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2026-10-13T19:00:55.764Z

Updated: 2026-10-31T18:09:09.566Z

Reserved: 2026-08-31T23:02:37.949Z

Link: CVE-2026-83790

Vulnrichment

Updated: 2026-10-13T20:27:49.487Z

NVD

Status : Analyzed

Published: 2026-10-13T19:20:28.743

Modified: 2026-10-28T20:03:41.290

Link: CVE-2026-83790

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-10-23T19:00:20Z

Weaknesses

CWE-416
Use After Free

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object