Microsoft Windows 11 Version 25H2 vulnerabilities

CVE-2026-62768 [HIGH] CWE-121 CVE-2026-62768: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-65671 [HIGH] CWE-122 CVE-2026-65671: Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate pri Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.

CVE-2026-62877 [HIGH] CWE-121 CVE-2026-62877: Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges lo Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.

CVE-2026-70346 [HIGH] CWE-121 CVE-2026-70346: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-50412 [HIGH] CWE-121 CVE-2026-50412: Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges loca Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-50400 [HIGH] CWE-121 CVE-2026-50400: Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privil Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-57096 [HIGH] CWE-122 CVE-2026-57096: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.

CVE-2026-50318 [HIGH] CWE-121 CVE-2026-50318: Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-50387 [HIGH] CWE-121 CVE-2026-50387: Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges local Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.

CVE-2026-88093 [HIGH] CWE-122 CVE-2026-88093: Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privil Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-85368 [HIGH] CWE-122 CVE-2026-85368: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83767 [HIGH] CWE-121 CVE-2026-83767: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-20849 [HIGH] CWE-807 CVE-2026-20849: Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacke Reliance on untrusted inputs in a security decision in Windows Kerberos allows an authorized attacker to elevate privileges over a network.

CVE-2026-85867 [HIGH] CWE-122 CVE-2026-85867: Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-69793 [HIGH] CWE-1288 CVE-2026-69793: Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-83754 [HIGH] CWE-122 CVE-2026-83754: Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code ov Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

CVE-2026-70095 [HIGH] CWE-122 CVE-2026-70095: Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-96071 [HIGH] CWE-122 CVE-2026-96071: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

CVE-2026-69602 [HIGH] CWE-416 CVE-2026-69602: Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges o Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges over a network.

CVE-2026-69706 [HIGH] CWE-416 CVE-2026-69706: Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network. Use after free in Windows Win32K allows an authorized attacker to elevate privileges over a network.