Microsoft Windows 11 26H2 vulnerabilities

CVE-2026-70103 [HIGH] CWE-122 CVE-2026-70103: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-83896 [HIGH] CWE-122 CVE-2026-83896: Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate pr Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-69633 [HIGH] CWE-122 CVE-2026-69633: Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-85902 [HIGH] CWE-122 CVE-2026-85902: Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate pr Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-70285 [HIGH] CWE-122 CVE-2026-70285: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-69898 [HIGH] CWE-122 CVE-2026-69898: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70114 [HIGH] CWE-122 CVE-2026-70114: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70121 [HIGH] CWE-122 CVE-2026-70121: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-69949 [HIGH] CWE-122 CVE-2026-69949: Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally.

CVE-2026-68836 [HIGH] CWE-122 CVE-2026-68836: Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileg Heap-based buffer overflow in Windows kernel32.dll allows an authorized attacker to elevate privileges locally.

CVE-2026-70027 [HIGH] CWE-122 CVE-2026-70027: Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate p Heap-based buffer overflow in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

CVE-2026-83882 [HIGH] CWE-122 CVE-2026-83882: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96913 [HIGH] CWE-122 CVE-2026-96913: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96916 [HIGH] CWE-122 CVE-2026-96916: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96843 [HIGH] CWE-122 CVE-2026-96843: Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-69909 [HIGH] CWE-122 CVE-2026-69909: Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate pri Heap-based buffer overflow in Microsoft COM for Windows allows an authorized attacker to elevate privileges locally.

CVE-2026-85373 [HIGH] CWE-122 CVE-2026-85373: Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorize Heap-based buffer overflow in Windows Universal Plug and Play (UPnP) Device Host allows an authorized attacker to elevate privileges locally.

CVE-2026-96318 [HIGH] CWE-122 CVE-2026-96318: Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Resume allows an authorized attacker to elevate privileges locally.

CVE-2026-96312 [HIGH] CWE-122 CVE-2026-96312: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96856 [HIGH] CWE-122 CVE-2026-96856: Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to el Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.