CVE-2026-108471: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Q: Who can exploit this vulnerability?

An attacker must already be authorized on the affected system and have local access. The vulnerability is an elevation-of-privilege issue, so it is relevant after an attacker or low-privileged user has obtained local execution.

Q: What security impact can successful exploitation have?

Successful exploitation can allow elevation of privileges locally. The supplied severity data indicates high impacts to confidentiality, integrity, and availability, with scope changed.

Q: Which products are identified as affected?

The provided affected software list includes Microsoft Windows 10, Microsoft Windows Server 2019, and Microsoft Virtualization-Based Security (VBS).

Q: Is user interaction required to exploit it?

No user interaction is required according to the supplied vector. Exploitation has low attack complexity but requires low privileges and local access.

Published Oct 13, 2026

Updated

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

Other sources

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

— Microsoft

Affected Software

5 affected componentsFixes available

Microsoft Windows 10=1809

10.0.17763.9376

Microsoft Windows 10=1809

10.0.17763.9376

Microsoft Windows Server 2019<10.0.17763.9376

10.0.17763.9376

Microsoft Windows Server 2019<10.0.17763.9376

10.0.17763.9376

Microsoft Virtualization-Based Security (VBS)

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.9376Patch KB5126651

Event History

Oct 13, 2026

CVE Published

via Microsoft·02:00 PM

Data Sourced

via Microsoft·02:00 PM

DescriptionSeverityWeaknessAffected Software

CVE Published

via MITRE·07:01 PM

Data Sourced

via MITRE·07:01 PM

DescriptionSeverity

Frequently Asked Questions

Who can exploit this vulnerability?

An attacker must already be authorized on the affected system and have local access. The vulnerability is an elevation-of-privilege issue, so it is relevant after an attacker or low-privileged user has obtained local execution.

What security impact can successful exploitation have?

Successful exploitation can allow elevation of privileges locally. The supplied severity data indicates high impacts to confidentiality, integrity, and availability, with scope changed.

Which products are identified as affected?

The provided affected software list includes Microsoft Windows 10, Microsoft Windows Server 2019, and Microsoft Virtualization-Based Security (VBS).

Is user interaction required to exploit it?

No user interaction is required according to the supplied vector. Exploitation has low attack complexity but requires low privileges and local access.

CVE-2026-108471: Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

Who can exploit this vulnerability?

What security impact can successful exploitation have?

Which products are identified as affected?

Is user interaction required to exploit it?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this vulnerability?

What security impact can successful exploitation have?

Which products are identified as affected?

Is user interaction required to exploit it?