Microsoft Windows 11 26H2 vulnerabilities

CVE-2026-96217 [HIGH] CWE-122 CVE-2026-96217: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83931 [HIGH] CWE-122 CVE-2026-83931: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-87711 [HIGH] CWE-121 CVE-2026-87711: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-69984 [HIGH] CWE-416 CVE-2026-69984: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69976 [HIGH] CWE-416 CVE-2026-69976: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69991 [HIGH] CWE-416 CVE-2026-69991: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69994 [HIGH] CWE-416 CVE-2026-69994: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69995 [HIGH] CWE-416 CVE-2026-69995: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69998 [HIGH] CWE-416 CVE-2026-69998: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-70004 [HIGH] CWE-416 CVE-2026-70004: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69996 [HIGH] CWE-416 CVE-2026-69996: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-70012 [HIGH] CWE-416 CVE-2026-70012: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-69997 [HIGH] CWE-416 CVE-2026-69997: Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a netwo Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-70031 [HIGH] CWE-122 CVE-2026-70031: Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a n Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network.

CVE-2026-83860 [HIGH] CWE-121 CVE-2026-83860: Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a ne Stack-based buffer overflow in Windows GDI allows an unauthorized attacker to deny service over a network.

CVE-2026-70112 [HIGH] CWE-122 CVE-2026-70112: Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code lo Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to execute code locally.

CVE-2026-83881 [HIGH] CWE-122 CVE-2026-83881: Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

CVE-2026-70093 [HIGH] CWE-122 CVE-2026-70093: Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevat Heap-based buffer overflow in Windows Rich Text Edit Control allows an authorized attacker to elevate privileges locally.

CVE-2026-102215 [HIGH] CWE-122 CVE-2026-102215: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-102205 [HIGH] CWE-122 CVE-2026-102205: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.