Microsoft Windows 11 25H2 vulnerabilities

CVE-2026-42992 [HIGH] CWE-122 CVE-2026-42992: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-44799 [HIGH] CWE-122 CVE-2026-44799: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-42993 [HIGH] CWE-122 CVE-2026-42993: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-32161 [HIGH] CWE-362 CVE-2026-32161: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Native WiFi Miniport Driver allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-87713 [HIGH] CWE-416 CVE-2026-87713: Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privilege Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.

CVE-2025-55694 [HIGH] CWE-284 CVE-2025-55694: Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileg Improper access control in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2025-58715 [HIGH] CWE-190 CVE-2025-58715: Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate Integer overflow or wraparound in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.

CVE-2026-69906 [HIGH] CWE-122 CVE-2026-69906: Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate pr Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.

CVE-2026-72962 [HIGH] CWE-122 CVE-2026-72962: Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate priv Heap-based buffer overflow in Windows USB Video Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69365 [HIGH] CWE-125 CVE-2026-69365: Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attack Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges over a network.

CVE-2026-96844 [HIGH] CWE-191 CVE-2026-96844: Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker t Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-25181 [HIGH] CWE-125 CVE-2026-25181: Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a ne Out-of-bounds read in Windows GDI+ allows an unauthorized attacker to disclose information over a network.

CVE-2026-69783 [HIGH] CWE-73 CVE-2026-69783: External control of file name or path in Windows Update allows an authorized attacker to elevate pri External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-32183 [HIGH] CWE-77 CVE-2026-32183: Improper neutralization of special elements used in a command ('command injection') in Windows Snipp Improper neutralization of special elements used in a command ('command injection') in Windows Snipping Tool allows an unauthorized attacker to execute code locally.

CVE-2026-96911 [HIGH] CWE-59 CVE-2026-96911: Improper link resolution before file access ('link following') in Microsoft Windows Search Component Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-20811 [HIGH] CWE-822 CVE-2026-20811: Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an au Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

CVE-2026-20859 [HIGH] CWE-416 CVE-2026-20859: Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges lo Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-20870 [HIGH] CWE-416 CVE-2026-20870: Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.

CVE-2026-54984 [HIGH] CWE-122 CVE-2026-54984: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.

CVE-2026-50347 [HIGH] CWE-122 CVE-2026-50347: Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code local Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally.