CVE-2026-83741

7.8High

Published 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash

7.8High

Attack vector: Local
Complexity: High
Privileges needed: Low
User interaction: None
Impact: Full C/I/A compromise
Weakness: CWE-416

Impact

A local attacker with an existing account can elevate privileges across security boundaries. They require local execution access on the target system.

Root cause

A use-after-free flaw in Internet Explorer mishandles memory references during object lifecycle operations.

Affected systems

Versions not listed — check the vendor advisory.

CVSS v3.1 · CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Fix & remediation

Install the security update from Microsoft for Internet Explorer via Windows Update once released. As an interim workaround, disable the Internet Explorer optional feature or restrict local execution rights for untrusted accounts.

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83741

Source: nvd.nist.gov/vuln/detail/CVE-2026-83741