Microsoft Windows 11 26H2 vulnerabilities

CVE-2026-85810 [HIGH] CWE-416 CVE-2026-85810: Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges local Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.

CVE-2026-85803 [HIGH] CWE-416 CVE-2026-85803: Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privi Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.

CVE-2026-85826 [HIGH] CWE-787 CVE-2026-85826: Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges l Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-84020 [HIGH] CWE-416 CVE-2026-84020: Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to Use after free in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

CVE-2026-88161 [HIGH] CWE-416 CVE-2026-88161: Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate pr Use after free in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.

CVE-2026-85918 [HIGH] CWE-416 CVE-2026-85918: Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker t Use after free in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVE-2026-69766 [HIGH] CWE-362 CVE-2026-69766: Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-69856 [HIGH] CWE-362 CVE-2026-69856: Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-83879 [HIGH] CWE-362 CVE-2026-83879: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69935 [HIGH] CWE-362 CVE-2026-69935: Use after free in Windows Storage allows an authorized attacker to elevate privileges locally. Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-69931 [HIGH] CWE-362 CVE-2026-69931: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-102207 [HIGH] CWE-362 CVE-2026-102207: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-85333 [HIGH] CWE-362 CVE-2026-85333: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Performance Monitor allows an authorized attacker to elevate privileges locally.

CVE-2026-84019 [HIGH] CWE-416 CVE-2026-84019: Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate p Use after free in Windows Advanced Rasterization Platform allows an authorized attacker to elevate privileges locally.

CVE-2026-85912 [HIGH] CWE-362 CVE-2026-85912: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85824 [HIGH] CWE-362 CVE-2026-85824: Use after free in Windows Composite Image File System allows an authorized attacker to elevate privi Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.

CVE-2026-96215 [HIGH] CWE-362 CVE-2026-96215: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Autopilot allows an authorized attacker to elevate privileges locally.

CVE-2026-85904 [HIGH] CWE-362 CVE-2026-85904: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83895 [MEDIUM] CWE-122 CVE-2026-83895: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elev Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-69947 [MEDIUM] CWE-122 CVE-2026-69947: Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.