Microsoft Windows 11 25H2 vulnerabilities

CVE-2026-73007 [HIGH] CWE-122 CVE-2026-73007: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-78447 [HIGH] CWE-122 CVE-2026-78447: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-73021 [HIGH] CWE-20 CVE-2026-73021: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69589 [HIGH] CWE-122 CVE-2026-69589: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-68885 [HIGH] CWE-122 CVE-2026-68885: Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

CVE-2026-69420 [HIGH] CWE-122 CVE-2026-69420: Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privilege Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally.

CVE-2026-72996 [HIGH] CWE-20 CVE-2026-72996: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-68890 [HIGH] CWE-122 CVE-2026-68890: Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

CVE-2026-65787 [HIGH] CWE-122 CVE-2026-65787: Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privil Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-65814 [HIGH] CWE-122 CVE-2026-65814: Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate p Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-62700 [HIGH] CWE-122 CVE-2026-62700: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-61359 [HIGH] CWE-122 CVE-2026-61359: Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-62732 [HIGH] CWE-122 CVE-2026-62732: Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62695 [HIGH] CWE-122 CVE-2026-62695: Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-62688 [HIGH] CWE-122 CVE-2026-62688: Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate p Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVE-2026-62747 [HIGH] CWE-122 CVE-2026-62747: Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to el Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-65774 [HIGH] CWE-122 CVE-2026-65774: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-70345 [HIGH] CWE-122 CVE-2026-70345: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-61923 [HIGH] CWE-122 CVE-2026-61923: Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to e Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.

CVE-2026-65786 [HIGH] CWE-122 CVE-2026-65786: Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privil Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.