Multiple CVEs Affect Windows Virtualization-Based Security (VBS) Enclave
Article Content
Browse articles 
Four vulnerabilities have been identified in Windows Virtualization-Based Security (VBS) Enclave, allowing both authorized and unauthorized attackers to disclose information or elevate privileges locally. The vulnerabilities include untrusted pointer dereferences and a heap-based buffer overflow, impacting the security of systems utilizing VBS. Specific CVEs include CVE-2026-20819, CVE-2026-20938, CVE-2026-20876, and CVE-2026-20935.
Ask AI about this cluster
Answers cite the sources they use
Updated 227d ago How this analysis works
More articles in this cluster (4)
Following this threat?
Track CVE-2026-20819 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
.NET Vulnerability CVE-2026-111497 Requires Immediate Action On October 25, 2026, Microsoft released out-of-band security updates for.NET addressing CVE-2026-111497, a vulnerability in the Brotli decompression algorithm that allows unauthorized attackers to elevate privileges over a network. The flaw affects.NET versions 8, 9, 10, and 11, particularly in applications that… 
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…