Microsoft Windows 11 26H1 vulnerabilities

CVE-2026-80096 [HIGH] CWE-125 CVE-2026-80096: Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privi Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.

CVE-2026-96952 [HIGH] CWE-122 CVE-2026-96952: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-102203 [HIGH] CWE-843 CVE-2026-102203: Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized Access of resource using incompatible type ('type confusion') in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-83874 [HIGH] CWE-122 CVE-2026-83874: Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to execute code over a network.

CVE-2026-70203 [HIGH] CWE-122 CVE-2026-70203: Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code o Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

CVE-2026-70586 [HIGH] CWE-122 CVE-2026-70586: Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Windows Paint allows an unauthorized attacker to execute code over a network.

CVE-2026-73006 [HIGH] CWE-121 CVE-2026-73006: Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execu Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-72960 [HIGH] CWE-122 CVE-2026-72960: Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code o Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.

CVE-2026-72940 [HIGH] CWE-122 CVE-2026-72940: Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over Heap-based buffer overflow in Windows Schannel allows an unauthorized attacker to execute code over a network.

CVE-2026-69518 [HIGH] CWE-122 CVE-2026-69518: Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network.

CVE-2026-69985 [HIGH] CWE-122 CVE-2026-69985: Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code ove Heap-based buffer overflow in Windows Libarchive allows an unauthorized attacker to execute code over a network.

CVE-2026-50500 [HIGH] CWE-416 CVE-2026-50500: Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a networ Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network.

CVE-2026-25188 [HIGH] CWE-122 CVE-2026-25188: Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate p Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to elevate privileges over an adjacent network.

CVE-2026-33827 [HIGH] CWE-362 CVE-2026-33827: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

CVE-2026-24294 [HIGH] CWE-287 CVE-2026-24294: Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges lo Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

CVE-2026-88219 [HIGH] CWE-822 CVE-2026-88219: Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-73016 [HIGH] CWE-122 CVE-2026-73016: Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execut Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-69334 [HIGH] CWE-122 CVE-2026-69334: Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacke Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-69601 [HIGH] CWE-122 CVE-2026-69601: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-73023 [HIGH] CWE-122 CVE-2026-73023: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.