CVE-2026-88074: CWE-190: Integer Overflow or Wraparound in Microsoft Windows 11 version 23H2

CVE-2026-88074 is a vulnerability involving integer overflow or wraparound in the Windows Virtualization-Based Security (VBS) Enclave on Windows 11 version 23H2. An authorized local attacker can exploit this flaw to elevate privileges. The vulnerability affects multiple builds of Windows 11 23H2, specifically versions from 10.0.22631.0 up to but not including 10.0.22631.7652, 10.0.26100.0 up to but not including 10.0.26100.9711, 10.0.26200.0 up to but not including 10.0.26200.9711, 10.0.28000.0 up to but not including 10.0.28000.3231, and 10.0.26300.0 up to but not including 10.0.26300.9711. Microsoft has published an official fix for this vulnerability.

Successful exploitation of this vulnerability allows a locally authorized attacker to elevate their privileges, potentially gaining higher-level access to the affected system. The impact includes complete confidentiality, integrity, and availability compromise as indicated by the CVSS vector (C:H/I:H/A:H). There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security updates provided by Microsoft for Windows 11 version 23H2 as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88074. No additional mitigation steps are indicated beyond applying the official patch.