CVE-2026-108471

Published 13 October 2026 · tracked since 14 October 2026

Description

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-110215 HIGH 8.8
• CVE-2026-109428 HIGH 8.8
• CVE-2026-108463 HIGH 8.8
• CVE-2026-108400 HIGH 8.8
• CVE-2026-108457 HIGH 8.1
• CVE-2026-108460 HIGH 8.1
• CVE-2026-108136 HIGH 7.8
• CVE-2026-108398 HIGH 8.8
• CVE-2026-108130 HIGH 7.8
• CVE-2026-108133 HIGH 7.8

→ Open the live CVE board · all tools