Microsoft Windows 11 26H2 vulnerabilities

CVE-2026-70092 [HIGH] CWE-122 CVE-2026-70092: Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to Heap-based buffer overflow in Microsoft PostScript Printer Driver allows an unauthorized attacker to elevate privileges locally.

CVE-2026-83876 [HIGH] CWE-416 CVE-2026-83876: Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-70023 [HIGH] CWE-416 CVE-2026-70023: Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-83883 [HIGH] CWE-416 CVE-2026-83883: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-83859 [HIGH] CWE-416 CVE-2026-83859: Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally. Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-85836 [HIGH] CWE-416 CVE-2026-85836: Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally. Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96308 [HIGH] CWE-416 CVE-2026-96308: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-84013 [HIGH] CWE-416 CVE-2026-84013: Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges local Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.

CVE-2026-96309 [HIGH] CWE-416 CVE-2026-96309: Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges lo Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.

CVE-2026-96223 [HIGH] CWE-416 CVE-2026-96223: Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-85322 [HIGH] CWE-908 CVE-2026-85322: Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthor Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

CVE-2026-96245 [HIGH] CWE-125 CVE-2026-96245: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attack Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to disclose information over a network.

CVE-2026-96246 [HIGH] CWE-125 CVE-2026-96246: Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose inform Out-of-bounds read in Network Policy Server (NPS) allows an unauthorized attacker to disclose information over a network.

CVE-2026-87713 [HIGH] CWE-416 CVE-2026-87713: Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privilege Use after free in Windows Bluetooth Port Driver allows an unauthorized attacker to elevate privileges over an adjacent network.

CVE-2026-96844 [HIGH] CWE-191 CVE-2026-96844: Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker t Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-96911 [HIGH] CWE-59 CVE-2026-96911: Improper link resolution before file access ('link following') in Microsoft Windows Search Component Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83761 [HIGH] CWE-416 CVE-2026-83761: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-70303 [HIGH] CWE-787 CVE-2026-70303: Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally. Out-of-bounds write in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-69926 [HIGH] CWE-843 CVE-2026-69926: Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an au Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-69880 [HIGH] CWE-843 CVE-2026-69880: Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an au Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges locally.