Microsoft Windows 11 26H2 vulnerabilities

CVE-2026-70111 [HIGH] CWE-822 CVE-2026-70111: Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privilege Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-70014 [HIGH] CWE-416 CVE-2026-70014: Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.

CVE-2026-83856 [HIGH] CWE-125 CVE-2026-83856: Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

CVE-2026-70108 [HIGH] CWE-122 CVE-2026-70108: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70106 [HIGH] CWE-122 CVE-2026-70106: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83867 [HIGH] CWE-122 CVE-2026-83867: Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate pr Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.

CVE-2026-85901 [HIGH] CWE-122 CVE-2026-85901: Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privile Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

CVE-2026-70010 [HIGH] CWE-122 CVE-2026-70010: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69471 [HIGH] CWE-122 CVE-2026-69471: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83861 [HIGH] CWE-122 CVE-2026-83861: Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to eleva Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.

CVE-2026-88093 [HIGH] CWE-122 CVE-2026-88093: Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privil Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-70095 [HIGH] CWE-122 CVE-2026-70095: Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-96071 [HIGH] CWE-122 CVE-2026-96071: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

CVE-2026-85798 [HIGH] CWE-122 CVE-2026-85798: Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

CVE-2026-88091 [HIGH] CWE-502 CVE-2026-88091: Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacke Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-96914 [HIGH] CWE-122 CVE-2026-96914: Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an auth Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2026-69945 [HIGH] CWE-862 CVE-2026-69945: Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.

CVE-2026-69918 [HIGH] CWE-122 CVE-2026-69918: Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

CVE-2026-70117 [HIGH] CWE-122 CVE-2026-70117: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-83768 [HIGH] CWE-122 CVE-2026-83768: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.