Microsoft Windows 11 26H2 vulnerabilities

CVE-2026-70232 [MEDIUM] CWE-497 CVE-2026-70232: Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-70199 [MEDIUM] CWE-497 CVE-2026-70199: Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-108462 [MEDIUM] CWE-497 CVE-2026-108462: Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-85812 [MEDIUM] CWE-552 CVE-2026-85812: Files or directories accessible to external parties in Windows Bind Filter Driver allows an authoriz Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.

CVE-2026-70041 [MEDIUM] CWE-126 CVE-2026-70041: Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information loca Buffer over-read in Windows CD-ROM Driver allows an authorized attacker to disclose information locally.

CVE-2026-69954 [MEDIUM] CWE-126 CVE-2026-69954: Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information loc Buffer over-read in Windows Overlay Filter allows an authorized attacker to disclose information locally.

CVE-2026-85916 [MEDIUM] CWE-359 CVE-2026-85916: Exposure of private personal information to an unauthorized actor in Azure Active Directory allows a Exposure of private personal information to an unauthorized actor in Azure Active Directory allows an unauthorized attacker to disclose information locally.

CVE-2026-69979 [MEDIUM] CWE-424 CVE-2026-69979: Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attack Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.

CVE-2026-96183 [MEDIUM] CWE-306 CVE-2026-96183: Missing authentication for critical function in Windows Health and Optimized Experiences Service all Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.

CVE-2026-96857 [MEDIUM] CWE-552 CVE-2026-96857: Files or directories accessible to external parties in Windows Projected File System allows an autho Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.

CVE-2026-83864 [MEDIUM] CWE-290 CVE-2026-83864: Improper access control in Windows NTFS allows an authorized attacker to disclose information locall Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-96854 [MEDIUM] CWE-843 CVE-2026-96854: Access of resource using incompatible type ('type confusion') in Windows Device Association Service Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.

CVE-2026-83854 [MEDIUM] CWE-306 CVE-2026-83854: Improper access control in Windows Notification allows an authorized attacker to disclose informatio Improper access control in Windows Notification allows an authorized attacker to disclose information locally.

CVE-2026-96316 [MEDIUM] CWE-862 CVE-2026-96316: Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized att Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.

CVE-2026-96855 [MEDIUM] CWE-862 CVE-2026-96855: Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to p Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

CVE-2026-96311 [MEDIUM] CWE-862 CVE-2026-96311: Improper authorization in Windows Network List Service allows an authorized attacker to perform tamp Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.

CVE-2026-84011 [MEDIUM] CWE-863 CVE-2026-84011: Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security fea Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.

CVE-2026-108466 [MEDIUM] CWE-125 CVE-2026-108466: Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network. Out-of-bounds read in Windows Kernel allows an unauthorized attacker to deny service over a network.

CVE-2026-83893 [MEDIUM] CWE-497 CVE-2026-83893: Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Exposure of sensitive system information to an unauthorized control sphere in Windows Clipboard User Service allows an authorized attacker to disclose information locally.

CVE-2026-96948 [MEDIUM] CWE-497 CVE-2026-96948: Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (cs Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.