Skip to content
CodeAuditAgent

CVE-2026-23670

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.

Weakness

Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.

Affected products

  • microsoft windows_10_1607
  • microsoft windows_10_1809
  • microsoft windows_10_21h2
  • microsoft windows_10_22h2
  • microsoft windows_11_23h2
  • microsoft windows_11_24h2
  • microsoft windows_11_25h2
  • microsoft windows_11_26h1

References

Find the bug before an attacker does.

Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.