CVE Watch13 oct 2026

CVE-2026-83664

Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to

CVSS

5.5

Medio

EPSS

0.3%

p23

KEV

—

Exploit Today

0-100

Publicado: 13 oct 2026 · Última mod.: 13 oct 2026 · CWE-843

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.

Referencias oficiales

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83664

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-0314—

—

——0A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.11h CVE-2026-1101408.8 ALT

13.3%

——4Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)4h CVE-2026-969215.5 MED

32.1%

——10Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.2d CVE-2026-968545.5 MED

21.7%

——7Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.2d CVE-2026-853777.8 ALT

23.1%

——7Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.1d CVE-2026-837637.8 ALT

27.6%

——8Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.1d