Microsoft Windows 11 26H1 vulnerabilities

CVE-2026-85360 [HIGH] CWE-416 CVE-2026-85360: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-69473 [HIGH] CWE-416 CVE-2026-69473: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-32087 [HIGH] CWE-122 CVE-2026-32087: Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker t Heap-based buffer overflow in Function Discovery Service (fdwsd.dll) allows an authorized attacker to elevate privileges locally.

CVE-2026-73005 [HIGH] CWE-362 CVE-2026-73005: Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges Use after free in Windows Authentication Methods allows an authorized attacker to elevate privileges locally.

CVE-2026-70072 [MEDIUM] CWE-770 CVE-2026-70072: Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attack Allocation of resources without limits or throttling in Windows Netlogon allows an authorized attacker to deny service over a network.

CVE-2026-97819 [MEDIUM] CWE-125 CVE-2026-97819: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-108127 [MEDIUM] CWE-125 CVE-2026-108127: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-108128 [MEDIUM] CWE-125 CVE-2026-108128: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-108129 [MEDIUM] CWE-125 CVE-2026-108129: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-70025 [MEDIUM] CWE-416 CVE-2026-70025: Use after free in Windows Netlogon allows an authorized attacker to deny service over a network. Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.

CVE-2026-34348 [MEDIUM] CWE-693 CVE-2026-34348: Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to discl Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network.

CVE-2026-85331 [MEDIUM] CWE-125 CVE-2026-85331: Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose i Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.

CVE-2026-97824 [MEDIUM] CWE-125 CVE-2026-97824: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97827 [MEDIUM] CWE-125 CVE-2026-97827: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97829 [MEDIUM] CWE-125 CVE-2026-97829: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97823 [MEDIUM] CWE-125 CVE-2026-97823: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97825 [MEDIUM] CWE-125 CVE-2026-97825: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97821 [MEDIUM] CWE-125 CVE-2026-97821: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97826 [MEDIUM] CWE-125 CVE-2026-97826: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97820 [MEDIUM] CWE-125 CVE-2026-97820: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.