Microsoft Windows 11 25H2 vulnerabilities

CVE-2026-40397 [HIGH] CWE-191 CVE-2026-40397: Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-26160 [HIGH] CWE-306 CVE-2026-26160: Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an a Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.

CVE-2026-44810 [HIGH] CWE-287 CVE-2026-44810: Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate Improper authentication in Windows Cryptographic Services allows an unauthorized attacker to elevate privileges locally.

CVE-2026-50445 [HIGH] CWE-126 CVE-2026-50445: Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a netwo Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network.

CVE-2026-58535 [HIGH] CWE-908 CVE-2026-58535: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

CVE-2026-58533 [HIGH] CWE-908 CVE-2026-58533: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

CVE-2026-97788 [HIGH] CWE-203 CVE-2026-97788: Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attack Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

CVE-2026-69992 [HIGH] CWE-416 CVE-2026-69992: Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code ov Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVE-2026-69397 [HIGH] CWE-416 CVE-2026-69397: Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

CVE-2026-103577 [HIGH] CWE-453 CVE-2026-103577: Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-69789 [HIGH] CWE-122 CVE-2026-69789: Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized at Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-44801 [HIGH] CWE-416 CVE-2026-44801: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-62759 [HIGH] CWE-290 CVE-2026-62759: Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spo Authentication bypass by spoofing in Windows Netlogon allows an unauthorized attacker to perform spoofing over an adjacent network.

CVE-2026-85811 [HIGH] CWE-416 CVE-2026-85811: Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.

CVE-2025-55681 [HIGH] CWE-125 CVE-2025-55681: Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows DWM allows an authorized attacker to elevate privileges locally.

CVE-2025-58716 [HIGH] CWE-20 CVE-2025-58716: Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privi Improper input validation in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

CVE-2025-60705 [HIGH] CWE-284 CVE-2025-60705: Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker t Improper access control in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

CVE-2026-50429 [HIGH] CWE-125 CVE-2026-50429: Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network.

CVE-2026-56179 [HIGH] CWE-346 CVE-2026-56179: Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.

CVE-2026-56181 [HIGH] CWE-346 CVE-2026-56181: Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.