Microsoft Windows 11 26H2 vulnerabilities

CVE-2026-69940 [MEDIUM] CWE-125 CVE-2026-69940: Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

CVE-2026-70244 [MEDIUM] CWE-125 CVE-2026-70244: Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a netw Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.

CVE-2026-69955 [MEDIUM] CWE-125 CVE-2026-69955: Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

CVE-2026-88076 [HIGH] CWE-476 CVE-2026-88076: Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges lo Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96209 [HIGH] CWE-125 CVE-2026-96209: Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privilege Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.

CVE-2026-96937 [HIGH] CWE-416 CVE-2026-96937: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-87710 [HIGH] CWE-362 CVE-2026-87710: Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized a Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

CVE-2026-69640 [MEDIUM] CWE-863 CVE-2026-69640: Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.

CVE-2026-88098 [HIGH] CWE-822 CVE-2026-88098: Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized at Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.

CVE-2026-85920 [HIGH] CWE-367 CVE-2026-85920: Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker Time-of-check time-of-use (toctou) race condition in Windows BitLocker allows an authorized attacker to elevate privileges locally.

CVE-2026-88160 [HIGH] CWE-362 CVE-2026-88160: Concurrent execution using shared resource with improper synchronization ('race condition') in Micro Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-69902 [MEDIUM] CWE-822 CVE-2026-69902: Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally. Untrusted pointer dereference in Windows NTFS allows an authorized attacker to execute code locally.

CVE-2026-96300 [MEDIUM] CWE-770 CVE-2026-96300: Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to Uncontrolled resource consumption in RPC Endpoint Mapper Service allows an unauthorized attacker to deny service over a network.

CVE-2026-102198 [MEDIUM] CWE-125 CVE-2026-102198: Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose info Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.

CVE-2026-102188 [MEDIUM] CWE-822 CVE-2026-102188: Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elev Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-96218 [MEDIUM] CWE-15 CVE-2026-96218: Improper access control in Windows Update Stack allows an authorized attacker to perform tampering l Improper access control in Windows Update Stack allows an authorized attacker to perform tampering locally.

CVE-2026-62879 [MEDIUM] CWE-306 CVE-2026-62879: Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to Missing authentication for critical function in Windows SmartScreen allows an authorized attacker to perform tampering locally.

CVE-2026-85816 [MEDIUM] CWE-125 CVE-2026-85816: Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information ove Out-of-bounds read in Windows Wi-Fi Driver allows an authorized attacker to disclose information over an adjacent network.

CVE-2026-62687 [MEDIUM] CWE-59 CVE-2026-62687: Improper link resolution before file access ('link following') in Windows Backup Engine allows an au Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally.

CVE-2026-85910 [MEDIUM] CWE-126 CVE-2026-85910: Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose informatio Buffer over-read in Windows StateRepository API allows an authorized attacker to disclose information locally.