Microsoft Windows 11 Version 25H2 vulnerabilities

CVE-2026-70280 [MEDIUM] CWE-863 CVE-2026-70280: Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.

CVE-2026-69979 [MEDIUM] CWE-424 CVE-2026-69979: Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attack Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally.

CVE-2026-96183 [MEDIUM] CWE-306 CVE-2026-96183: Missing authentication for critical function in Windows Health and Optimized Experiences Service all Missing authentication for critical function in Windows Health and Optimized Experiences Service allows an authorized attacker to disclose information locally.

CVE-2026-83864 [MEDIUM] CWE-290 CVE-2026-83864: Improper access control in Windows NTFS allows an authorized attacker to disclose information locall Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-96854 [MEDIUM] CWE-843 CVE-2026-96854: Access of resource using incompatible type ('type confusion') in Windows Device Association Service Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.

CVE-2026-58545 [MEDIUM] CWE-284 CVE-2026-58545: Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally.

CVE-2026-81964 [MEDIUM] CWE-798 CVE-2026-81964: Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker t Use of hard-coded credentials in Windows Update Orchestrator Service allows an authorized attacker to bypass a security feature locally.

CVE-2026-70216 [MEDIUM] CWE-1220 CVE-2026-70216: Insufficient granularity of access control in Windows Mobile Device Management allows an authorized Insufficient granularity of access control in Windows Mobile Device Management allows an authorized attacker to perform tampering locally.

CVE-2026-83854 [MEDIUM] CWE-306 CVE-2026-83854: Improper access control in Windows Notification allows an authorized attacker to disclose informatio Improper access control in Windows Notification allows an authorized attacker to disclose information locally.

CVE-2026-70235 [MEDIUM] CWE-862 CVE-2026-70235: Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing l Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.

CVE-2026-87709 [MEDIUM] CWE-250 CVE-2026-87709: Improper access control in Windows Host Guardian Service allows an authorized attacker to perform ta Improper access control in Windows Host Guardian Service allows an authorized attacker to perform tampering locally.

CVE-2026-72966 [MEDIUM] CWE-862 CVE-2026-72966: Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to p Missing authorization in Windows Remote Access Connection Manager allows an authorized attacker to perform tampering locally.

CVE-2026-96316 [MEDIUM] CWE-862 CVE-2026-96316: Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized att Improper access control in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to perform tampering locally.

CVE-2026-96855 [MEDIUM] CWE-862 CVE-2026-96855: Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to p Improper access control in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.

CVE-2026-96311 [MEDIUM] CWE-862 CVE-2026-96311: Improper authorization in Windows Network List Service allows an authorized attacker to perform tamp Improper authorization in Windows Network List Service allows an authorized attacker to perform tampering locally.

CVE-2026-84011 [MEDIUM] CWE-863 CVE-2026-84011: Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security fea Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally.

CVE-2026-69384 [HIGH] CWE-476 CVE-2026-69384: Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.

CVE-2026-40401 [HIGH] CWE-476 CVE-2026-40401: Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service locally. Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service locally.

CVE-2026-20935 [MEDIUM] CWE-822 CVE-2026-20935: Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unaut Untrusted pointer dereference in Windows Virtualization-Based Security (VBS) Enclave allows an unauthorized attacker to disclose information locally.

CVE-2026-83773 [MEDIUM] CWE-497 CVE-2026-83773: Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service M Exposure of sensitive system information to an unauthorized control sphere in Windows MIDI Service Module allows an authorized attacker to disclose information locally.