Microsoft Windows 11 Version 25H2 vulnerabilities

CVE-2025-59261 [HIGH] CWE-367 CVE-2025-59261: Time-of-check time-of-use (toctou) race condition in Microsoft Graphics Component allows an authoriz Time-of-check time-of-use (toctou) race condition in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83776 [MEDIUM] CWE-125 CVE-2026-83776: Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileg Out-of-bounds read in Microsoft Bluetooth Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-57097 [MEDIUM] CWE-426 CVE-2026-57097: Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack.

CVE-2026-77892 [MEDIUM] CWE-693 CVE-2026-77892: No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-50298 [MEDIUM] CWE-190 CVE-2026-50298: Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate p Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-62881 [MEDIUM] CWE-122 CVE-2026-62881: Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-62769 [MEDIUM] CWE-122 CVE-2026-62769: Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-65798 [MEDIUM] CWE-197 CVE-2026-65798: Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-62883 [MEDIUM] CWE-122 CVE-2026-62883: Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-65797 [MEDIUM] CWE-122 CVE-2026-65797: Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally. Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-32170 [MEDIUM] CWE-415 CVE-2026-32170: Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally. Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.

CVE-2026-21530 [MEDIUM] CWE-415 CVE-2026-21530: Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally. Double free in Windows Rich Text Edit allows an authorized attacker to elevate privileges locally.

CVE-2026-69781 [MEDIUM] CWE-401 CVE-2026-69781: Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized att Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.

CVE-2026-70122 [MEDIUM] CWE-367 CVE-2026-70122: Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an au Time-of-check time-of-use (toctou) race condition in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-105006 [MEDIUM] CWE-416 CVE-2026-105006: Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a phys Use after free in HID class driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-62708 [MEDIUM] CWE-416 CVE-2026-62708: Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physic Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-70582 [MEDIUM] CWE-362 CVE-2026-70582: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-40380 [MEDIUM] CWE-122 CVE-2026-40380: Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execu Heap-based buffer overflow in Volume Manager Extension Driver allows an authorized attacker to execute code with a physical attack.

CVE-2026-32072 [MEDIUM] CWE-287 CVE-2026-32072: Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoof Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally.

CVE-2026-50418 [MEDIUM] CWE-284 CVE-2026-50418: Improper access control in Windows System allows an unauthorized attacker to bypass a security featu Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally.