Microsoft Windows 11 Version 25H2 vulnerabilities

CVE-2026-21239 [HIGH] CWE-122 CVE-2026-21239: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70060 [HIGH] CWE-122 CVE-2026-70060: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-69918 [HIGH] CWE-122 CVE-2026-69918: Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

CVE-2026-58547 [HIGH] CWE-122 CVE-2026-58547: Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to el Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges locally.

CVE-2026-83902 [HIGH] CWE-122 CVE-2026-83902: Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate pr Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-70117 [HIGH] CWE-122 CVE-2026-70117: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-83768 [HIGH] CWE-122 CVE-2026-83768: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70103 [HIGH] CWE-122 CVE-2026-70103: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-83896 [HIGH] CWE-122 CVE-2026-83896: Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate pr Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-83903 [HIGH] CWE-122 CVE-2026-83903: Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate pr Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-83579 [HIGH] CWE-122 CVE-2026-83579: Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges locally.

CVE-2026-70143 [HIGH] CWE-122 CVE-2026-70143: Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute c Heap-based buffer overflow in Windows Network File System allows an authorized attacker to execute code locally.

CVE-2026-70139 [HIGH] CWE-122 CVE-2026-70139: Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85902 [HIGH] CWE-122 CVE-2026-85902: Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate pr Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-69354 [HIGH] CWE-122 CVE-2026-69354: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-70285 [HIGH] CWE-122 CVE-2026-70285: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-69898 [HIGH] CWE-122 CVE-2026-69898: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-69633 [HIGH] CWE-122 CVE-2026-69633: Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-70114 [HIGH] CWE-122 CVE-2026-70114: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70121 [HIGH] CWE-122 CVE-2026-70121: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.