Microsoft Windows 11 24H2 vulnerabilities

CVE-2026-40400 [HIGH] CWE-23 CVE-2026-40400: Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a n Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network.

CVE-2026-68827 [HIGH] CWE-122 CVE-2026-68827: Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate priv Integer underflow (wrap or wraparound) in Windows GDI+ allows an authorized attacker to elevate privileges over a network.

CVE-2026-70031 [HIGH] CWE-122 CVE-2026-70031: Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a n Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.

CVE-2026-83860 [HIGH] CWE-121 CVE-2026-83860: Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a ne Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.

CVE-2025-26668 [HIGH] CWE-122 CVE-2025-26668: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorize Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execute code over a network.

CVE-2026-21236 [HIGH] CWE-122 CVE-2026-21236: Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized att Heap-based buffer overflow in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-83830 [HIGH] CWE-122 CVE-2026-83830: Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to ele Heap-based buffer overflow in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70112 [HIGH] CWE-122 CVE-2026-70112: Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code lo Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.

CVE-2026-83881 [HIGH] CWE-122 CVE-2026-83881: Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

CVE-2026-70093 [HIGH] CWE-122 CVE-2026-70093: Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevat Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.

CVE-2026-102215 [HIGH] CWE-122 CVE-2026-102215: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-102218 [HIGH] CWE-122 CVE-2026-102218: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-102205 [HIGH] CWE-122 CVE-2026-102205: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-50501 [HIGH] CWE-121 CVE-2026-50501: Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.

CVE-2026-105003 [HIGH] CWE-122 CVE-2026-105003: Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges l Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

CVE-2026-97804 [HIGH] CWE-122 CVE-2026-97804: Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges l Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

CVE-2026-49184 [HIGH] CWE-122 CVE-2026-49184: Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-83932 [HIGH] CWE-122 CVE-2026-83932: Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileg Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.

CVE-2026-62810 [HIGH] CWE-122 CVE-2026-62810: Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized att Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.

CVE-2026-69359 [HIGH] CWE-122 CVE-2026-69359: Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elev Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.