Microsoft Windows 11 26H2 vulnerabilities

CVE-2026-88101 [HIGH] CWE-1390 CVE-2026-88101: Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate Weak authentication in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

CVE-2026-69733 [HIGH] CWE-426 CVE-2026-69733: Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-69882 [HIGH] CWE-426 CVE-2026-69882: Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally. Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-69923 [HIGH] CWE-427 CVE-2026-69923: Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges l Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.

CVE-2026-69783 [HIGH] CWE-73 CVE-2026-69783: External control of file name or path in Windows Update allows an authorized attacker to elevate pri External control of file name or path in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-88072 [HIGH] CWE-59 CVE-2026-88072: Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate pr Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally.

CVE-2026-103569 [HIGH] CWE-125 CVE-2026-103569: Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information Out-of-bounds read in Windows IKE Extension allows an unauthorized attacker to disclose information over a network.

CVE-2026-70113 [HIGH] CWE-190 CVE-2026-70113: Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate pr Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally.

CVE-2026-70008 [HIGH] CWE-190 CVE-2026-70008: Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to eleva Integer overflow or wraparound in Windows IP Over USB Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69942 [HIGH] CWE-126 CVE-2026-69942: Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally. Buffer over-read in Windows Overlay Filter allows an authorized attacker to execute code locally.

CVE-2026-69953 [HIGH] CWE-126 CVE-2026-69953: Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges local Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69959 [HIGH] CWE-125 CVE-2026-69959: Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally. Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to execute code locally.

CVE-2026-69950 [HIGH] CWE-126 CVE-2026-69950: Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges local Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-88191 [HIGH] CWE-59 CVE-2026-88191: Improper link resolution before file access ('link following') in Microsoft Windows Search Component Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-102201 [HIGH] CWE-416 CVE-2026-102201: Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privil Use after free in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

CVE-2026-83872 [HIGH] CWE-681 CVE-2026-83872: Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevat Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-96118 [HIGH] CWE-125 CVE-2026-96118: Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges lo Out-of-bounds read in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-100217 [HIGH] CWE-862 CVE-2026-100217: Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privi Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.

CVE-2026-88070 [HIGH] CWE-125 CVE-2026-88070: Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally. Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate privileges locally.

CVE-2026-96918 [HIGH] CWE-863 CVE-2026-96918: Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally. Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally.