Microsoft Windows 11 Version 25H2 vulnerabilities

CVE-2026-70138 [HIGH] CWE-122 CVE-2026-70138: Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locall Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

CVE-2026-70059 [HIGH] CWE-122 CVE-2026-70059: Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locall Heap-based buffer overflow in Windows OLE allows an authorized attacker to elevate privileges locally.

CVE-2026-69471 [HIGH] CWE-122 CVE-2026-69471: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-108130 [HIGH] CWE-122 CVE-2026-108130: Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authoriz Heap-based buffer overflow in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2026-83709 [HIGH] CWE-122 CVE-2026-83709: Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges local Heap-based buffer overflow in Windows NTLM allows an authorized attacker to elevate privileges locally.

CVE-2026-83678 [HIGH] CWE-122 CVE-2026-83678: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83779 [HIGH] CWE-122 CVE-2026-83779: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-83757 [HIGH] CWE-122 CVE-2026-83757: Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-83828 [HIGH] CWE-122 CVE-2026-83828: Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate p Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVE-2026-83652 [HIGH] CWE-122 CVE-2026-83652: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83691 [HIGH] CWE-122 CVE-2026-83691: Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privilege Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-49789 [HIGH] CWE-121 CVE-2026-49789: Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges loca Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83861 [HIGH] CWE-122 CVE-2026-83861: Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to eleva Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.

CVE-2026-69284 [HIGH] CWE-122 CVE-2026-69284: Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privilege Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally.

CVE-2026-71337 [HIGH] CWE-121 CVE-2026-71337: Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.

CVE-2026-69290 [HIGH] CWE-121 CVE-2026-69290: Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to el Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.

CVE-2026-69391 [HIGH] CWE-121 CVE-2026-69391: Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker t Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.

CVE-2026-65672 [HIGH] CWE-122 CVE-2026-65672: Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.

CVE-2026-62692 [HIGH] CWE-122 CVE-2026-62692: Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to eleva Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

CVE-2026-70344 [HIGH] CWE-121 CVE-2026-70344: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.