PT-2026-112031

CVE-2026-108471

Published

2026-10-13

Updated

2026-10-21

Description by

CVSS 3.1

8.8

High

MetricsAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Virtualization-Based Security (VBS) Enclave (affected versions not specified)

Description An untrusted pointer dereference in the Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally. This issue enables attackers to affect the system by gaining higher-level permissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Impacts

Researchers

A_Denkiewicz

Adrian Denkiewicz

Vendors

Affected products

Weakness enumeration

CWE-184: Incomplete List of Disallowed Inputs

CWE-822: Untrusted Pointer Dereference

Related identifiers

CVE-2026-108471