CVE-2026-108471

No fix known EPSS <1%CVSS 8.8

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Published 2026-10-13 · CVE record · OSV

Products: Microsoft Windows 10 Version 1809, Microsoft Windows Server 2019, Microsoft Windows Server 2019 (Server Core installation)