High MSRC-CVE-2026-83845 1 CVE

Windows Internet (wininet.dll) Spoofing Vulnerability

Published Oct 13, 2026 · Updated Oct 13, 2026

Vendor: Microsoft

Summary

Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Security updates
10.0.20348.5761 — https://support.microsoft.com/help/5126655
10.0.19044.7807 — https://support.microsoft.com/help/5126657
10.0.26100.33650 — https://support.microsoft.com/help/5126646
10.0.26200.9711 — https://support.microsoft.com/help/5127648
10.0.22631.7652 — https://support.microsoft.com/help/5126653
10.0.28000.3231 — https://support.microsoft.com/help/5127646

Vulnerabilities 1

High 8.4

CVE-2026-83845

Windows Internet (wininet.dll) Spoofing Vulnerability

Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.

Microsoft Windows Server 2022 Windows 10 Version 21H2 Windows 10 Version 22H2 Windows

Oct 13, 2026

Revision history

2026-10-13 #1
Information published.

References

CVE-2026-83845 Windows Internet (wininet.dll) Spoofing Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83845
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss