HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-65783 — Use after free in Windows Autopilot allows an authorized attacker to elevate pri...

·Source: NIST NVD

Updated:

Executive Summary

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.

Analysis

Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally. CVSS Score: 7. Published: 2026-08-11T17:18:57.810.

Indicators of Compromise (1)

CVE (1)
CVE-2026-65783
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 11, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-19598 — The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to...

The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Privilege Escalation via Authorization Bypass in all versions up to, and including, 3.3.9. The vulnerability exists because the pods_admin AJAX router funnels every access check — including the method allowlist, nonce verification, login enforcement, and capability gate — through pods_error(), which under the JSON met

CVE-2026-19598
NIST NVD
MEDIUMVulnerability

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch

[object Object]

CVE-2026-58231
r/cybersecurity
CRITICALVulnerability

NVD CRITICAL: CVE-2026-16142 — The TrueBooker plugin for WordPress is vulnerable to Account Takeover in all ver...

The TrueBooker plugin for WordPress is vulnerable to Account Takeover in all versions up to, and including, 1.2.6. This is due to the add_front_user_update() AJAX handler being registered for unauthenticated users and accepting an arbitrary truebooker_wp_user_id value, which is passed directly to wp_update_user() without verifying authentication or ownership. This makes it possible for unauthentic

CVE-2026-16142
NIST NVD