Microsoft Windows 11 25H2 vulnerabilities

CVE-2026-50474 [HIGH] CWE-416 CVE-2026-50474: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-32157 [HIGH] CWE-416 CVE-2026-32157: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69326 [HIGH] CWE-122 CVE-2026-69326: Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

CVE-2026-69689 [HIGH] CWE-121 CVE-2026-69689: Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a netw Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network.

CVE-2026-69717 [HIGH] CWE-125 CVE-2026-69717: Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privi Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network.

CVE-2026-50340 [HIGH] CWE-416 CVE-2026-50340: Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network.

CVE-2026-47653 [HIGH] CWE-416 CVE-2026-47653: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-42975 [HIGH] CWE-122 CVE-2026-42975: Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execu Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-40398 [HIGH] CWE-122 CVE-2026-40398: Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows Remote Desktop allows an authorized attacker to elevate privileges locally.

CVE-2026-20860 [HIGH] CWE-843 CVE-2026-20860: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-33837 [HIGH] CWE-122 CVE-2026-33837: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-62792 [HIGH] CWE-121 CVE-2026-62792: Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

CVE-2026-56649 [HIGH] CWE-362 CVE-2026-56649: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network.

CVE-2026-108463 [HIGH] CWE-41 CVE-2026-108463: Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to by Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-47289 [HIGH] CWE-122 CVE-2026-47289: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-73018 [HIGH] CWE-122 CVE-2026-73018: Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

CVE-2026-83998 [HIGH] CWE-122 CVE-2026-83998: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-72986 [HIGH] CWE-122 CVE-2026-72986: Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

CVE-2026-68828 [HIGH] CWE-122 CVE-2026-68828: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-62785 [HIGH] CWE-122 CVE-2026-62785: Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unautho Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.