Microsoft Windows 11 26H2 vulnerabilities

CVE-2026-102227 [HIGH] CWE-122 CVE-2026-102227: Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.

CVE-2026-83932 [HIGH] CWE-122 CVE-2026-83932: Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileg Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.

CVE-2026-97804 [HIGH] CWE-122 CVE-2026-97804: Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges l Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

CVE-2026-85800 [HIGH] CWE-122 CVE-2026-85800: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-85822 [HIGH] CWE-122 CVE-2026-85822: Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows exFAT File System allows an authorized attacker to elevate privileges locally.

CVE-2026-85327 [HIGH] CWE-122 CVE-2026-85327: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-85915 [HIGH] CWE-122 CVE-2026-85915: Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-96920 [HIGH] CWE-122 CVE-2026-96920: Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized a Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88168 [HIGH] CWE-122 CVE-2026-88168: Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate pr Heap-based buffer overflow in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-88193 [HIGH] CWE-122 CVE-2026-88193: Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate pr Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.

CVE-2026-96186 [HIGH] CWE-502 CVE-2026-96186: Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacke Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

CVE-2026-69718 [HIGH] CWE-77 CVE-2026-69718: Improper neutralization of special elements used in a command ('command injection') in Windows Updat Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-87716 [HIGH] CWE-122 CVE-2026-87716: Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to d Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.

CVE-2026-102218 [HIGH] CWE-122 CVE-2026-102218: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-97794 [HIGH] CWE-122 CVE-2026-97794: Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an a Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-97788 [HIGH] CWE-203 CVE-2026-97788: Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attack Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

CVE-2026-69992 [HIGH] CWE-416 CVE-2026-69992: Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code ov Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVE-2026-85811 [HIGH] CWE-416 CVE-2026-85811: Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-100215 [HIGH] CWE-122 CVE-2026-100215: Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execut Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.

CVE-2026-69673 [HIGH] CWE-59 CVE-2026-69673: Improper link resolution before file access ('link following') in Windows Update allows an authorize Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.