Microsoft Windows 11 Version 25H2 vulnerabilities

CVE-2026-83898 [MEDIUM] CWE-125 CVE-2026-83898: Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information local Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.

CVE-2026-83904 [MEDIUM] CWE-125 CVE-2026-83904: Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information local Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.

CVE-2026-50420 [MEDIUM] CWE-125 CVE-2026-50420: Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information local Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally.

CVE-2026-69318 [MEDIUM] CWE-125 CVE-2026-69318: Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose informatio Out-of-bounds read in Windows Imaging Component allows an authorized attacker to disclose information locally.

CVE-2026-83501 [MEDIUM] CWE-125 CVE-2026-83501: Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attac Out-of-bounds read in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to disclose information locally.

CVE-2026-69627 [MEDIUM] CWE-125 CVE-2026-69627: Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disc Out-of-bounds read in Windows Remote Desktop Licensing Service allows an authorized attacker to disclose information locally.

CVE-2026-69527 [MEDIUM] CWE-125 CVE-2026-69527: Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclos Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally.

CVE-2026-70290 [MEDIUM] CWE-908 CVE-2026-70290: Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to dis Use of uninitialized resource in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-68881 [MEDIUM] CWE-125 CVE-2026-68881: Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

CVE-2026-69367 [MEDIUM] CWE-125 CVE-2026-69367: Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

CVE-2026-69308 [MEDIUM] CWE-125 CVE-2026-69308: Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

CVE-2026-69770 [MEDIUM] CWE-908 CVE-2026-69770: Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose inf Use of uninitialized resource in Windows Spaceport.sys allows an authorized attacker to disclose information locally.

CVE-2026-69616 [MEDIUM] CWE-125 CVE-2026-69616: Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose info Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to disclose information locally.

CVE-2026-71341 [MEDIUM] CWE-125 CVE-2026-71341: Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to disclose information locally.

CVE-2026-69345 [MEDIUM] CWE-125 CVE-2026-69345: Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information l Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to disclose information locally.

CVE-2026-69344 [MEDIUM] CWE-125 CVE-2026-69344: Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose inf Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

CVE-2026-77492 [MEDIUM] CWE-125 CVE-2026-77492: Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information loca Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.

CVE-2026-69457 [MEDIUM] CWE-125 CVE-2026-69457: Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information local Out-of-bounds read in Windows USB Driver allows an authorized attacker to disclose information locally.

CVE-2026-68895 [MEDIUM] CWE-197 CVE-2026-68895: Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally.

CVE-2026-69568 [MEDIUM] CWE-125 CVE-2026-69568: Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose in Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally.