Microsoft Windows 11 26H2 vulnerabilities

CVE-2026-85808 [HIGH] CWE-125 CVE-2026-85808: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attack Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

CVE-2026-108136 [HIGH] CWE-416 CVE-2026-108136: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-105004 [HIGH] CWE-125 CVE-2026-105004: Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges loc Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-103553 [HIGH] CWE-125 CVE-2026-103553: Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate p Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96931 [HIGH] CWE-822 CVE-2026-96931: Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges lo Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96324 [HIGH] CWE-416 CVE-2026-96324: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-97799 [HIGH] CWE-347 CVE-2026-97799: Improper verification of cryptographic signature in Windows Audio Service allows an authorized attac Improper verification of cryptographic signature in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-97830 [HIGH] CWE-415 CVE-2026-97830: Double free in Windows Internet Information Services allows an unauthorized attacker to deny service Double free in Windows Internet Information Services allows an unauthorized attacker to deny service over a network.

CVE-2026-85338 [HIGH] CWE-125 CVE-2026-85338: Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileg Out-of-bounds read in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2026-96867 [HIGH] CWE-125 CVE-2026-96867: Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-97792 [HIGH] CWE-732 CVE-2026-97792: Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an auth Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-85796 [HIGH] CWE-121 CVE-2026-85796: Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges lo Numeric truncation error in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-88194 [HIGH] CWE-125 CVE-2026-88194: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88182 [HIGH] CWE-416 CVE-2026-88182: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-88181 [HIGH] CWE-125 CVE-2026-88181: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88188 [HIGH] CWE-125 CVE-2026-88188: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-88179 [HIGH] CWE-125 CVE-2026-88179: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-97813 [MEDIUM] CWE-122 CVE-2026-97813: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information over a network.

CVE-2026-69850 [HIGH] CWE-822 CVE-2026-69850: Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privi Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.

CVE-2026-84017 [HIGH] CWE-476 CVE-2026-84017: Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.