CVE-2026-83741: Internet Explorer Elevation of Privilege Vulnerability

Q: Who is exposed to this vulnerability?

Systems running the listed Microsoft Windows versions or Microsoft Internet Explorer may be exposed. Exploitation is local, so the attacker must already be able to run code or otherwise operate on the affected system.

Q: What level of access does an attacker need?

The attacker must be authorized and have low privileges locally. No user interaction is required once the attacker has the necessary local access.

Q: What is the potential impact of successful exploitation?

A successful attacker can elevate privileges locally. The supplied severity metrics indicate potential high impact to confidentiality, integrity, and availability.

Q: Is this a remote or network-exploitable issue?

The attack vector is local. The provided data does not indicate that the vulnerability can be exploited remotely over a network.

Published Oct 13, 2026

Updated

Internet Explorer Elevation of Privilege Vulnerability

Other sources

Use after free in Internet Explorer allows an authorized attacker to elevate privileges locally.

— Microsoft

Affected Software

25 affected componentsFixes available

Microsoft Internet Explorer

Microsoft Windows 11=26H2

10.0.26300.9711

Microsoft Windows 11=26H2

10.0.26300.9711

Microsoft Windows 11=23H2

10.0.22631.7652

Microsoft Windows 11=24H2

10.0.26100.9711

Microsoft Windows Server 2025<10.0.26100.33650

10.0.26100.33650

Microsoft Windows 11=26H1

10.0.28000.3231

Microsoft Windows 11=25H2

10.0.26200.9711

Microsoft Windows 11=24H2

10.0.26100.9711

Microsoft Windows 11=26H1

10.0.28000.3231

Microsoft Windows 11=23H2

10.0.22631.7652

Microsoft Windows 10=22H2

10.0.19044.7807

Microsoft Windows 11=25H2

10.0.26200.9711

Microsoft Windows 10=22H2

10.0.19044.7807

Microsoft Windows Server 2025<10.0.26100.33650

10.0.26100.33650

Microsoft Windows 10=21H2

10.0.19044.7807

Microsoft Windows 10=22H2

10.0.19044.7807

Microsoft Windows 10=21H2

10.0.19044.7807

Microsoft Windows 10=21H2

10.0.19044.7807

Microsoft Windows Server 2022<10.0.20348.5761

10.0.20348.5761

Microsoft Windows Server 2019<10.0.17763.9376

10.0.17763.9376

Microsoft Windows Server 2022<10.0.20348.5761

10.0.20348.5761

Microsoft Windows 10=1809

10.0.17763.9376

Microsoft Windows Server 2019<10.0.17763.9376

10.0.17763.9376

Microsoft Windows 10=1809

10.0.17763.9376

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26300.9711Patch KB5127648
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.22631.7652Patch KB5126653
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.9711Patch KB5127648
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26100.33650Patch KB5126646
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.28000.3231Patch KB5127646
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.26200.9711Patch KB5127648
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.19044.7807Patch KB5126657
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.5761Patch KB5126655
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.9376Patch KB5126651

Event History

Oct 13, 2026

CVE Published

via Microsoft·02:00 PM

Data Sourced

via Microsoft·02:00 PM

DescriptionSeverityWeaknessAffected Software

CVE Published

via MITRE·06:59 PM

Data Sourced

via MITRE·06:59 PM

DescriptionSeverity

Frequently Asked Questions

Who is exposed to this vulnerability?

Systems running the listed Microsoft Windows versions or Microsoft Internet Explorer may be exposed. Exploitation is local, so the attacker must already be able to run code or otherwise operate on the affected system.

What level of access does an attacker need?

The attacker must be authorized and have low privileges locally. No user interaction is required once the attacker has the necessary local access.

What is the potential impact of successful exploitation?

A successful attacker can elevate privileges locally. The supplied severity metrics indicate potential high impact to confidentiality, integrity, and availability.

Is this a remote or network-exploitable issue?

The attack vector is local. The provided data does not indicate that the vulnerability can be exploited remotely over a network.

CVE-2026-83741: Internet Explorer Elevation of Privilege Vulnerability

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

Who is exposed to this vulnerability?

What level of access does an attacker need?

What is the potential impact of successful exploitation?

Is this a remote or network-exploitable issue?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this vulnerability?

What level of access does an attacker need?

What is the potential impact of successful exploitation?

Is this a remote or network-exploitable issue?