Microsoft Windows 11 25H2 vulnerabilities

CVE-2026-69298 [HIGH] CWE-190 CVE-2026-69298: Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70574 [HIGH] CWE-125 CVE-2026-70574: Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to eleva Out-of-bounds read in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-70572 [HIGH] CWE-190 CVE-2026-70572: Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate Integer overflow or wraparound in Windows Biometric Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69265 [HIGH] CWE-125 CVE-2026-69265: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-62737 [HIGH] CWE-822 CVE-2026-62737: Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-62751 [HIGH] CWE-190 CVE-2026-62751: Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to ele Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.

CVE-2026-62876 [HIGH] CWE-125 CVE-2026-62876: Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-62733 [HIGH] CWE-125 CVE-2026-62733: Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-62880 [HIGH] CWE-125 CVE-2026-62880: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-62696 [HIGH] CWE-191 CVE-2026-62696: Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-61357 [HIGH] CWE-416 CVE-2026-61357: Use after free in Application Information Services allows an authorized attacker to elevate privileg Use after free in Application Information Services allows an authorized attacker to elevate privileges locally.

CVE-2026-62741 [HIGH] CWE-122 CVE-2026-62741: Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-50422 [HIGH] CWE-125 CVE-2026-50422: Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-50315 [HIGH] CWE-476 CVE-2026-50315: Null pointer dereference in Windows Image Acquisition allows an authorized attacker to elevate privi Null pointer dereference in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

CVE-2026-49792 [HIGH] CWE-197 CVE-2026-49792: Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to ex Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

CVE-2026-50357 [HIGH] CWE-197 CVE-2026-50357: Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to ex Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

CVE-2026-58532 [HIGH] CWE-190 CVE-2026-58532: Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-56176 [HIGH] CWE-125 CVE-2026-56176: Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges loca Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-55004 [HIGH] CWE-415 CVE-2026-55004: Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.

CVE-2026-54115 [HIGH] CWE-122 CVE-2026-54115: Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally.