Microsoft Windows 11 Version 25H2 vulnerabilities

CVE-2026-97804 [HIGH] CWE-122 CVE-2026-97804: Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges l Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

CVE-2026-49184 [HIGH] CWE-122 CVE-2026-49184: Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally. Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.

CVE-2026-83932 [HIGH] CWE-122 CVE-2026-83932: Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileg Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.

CVE-2026-62810 [HIGH] CWE-122 CVE-2026-62810: Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized att Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.

CVE-2026-69359 [HIGH] CWE-122 CVE-2026-69359: Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elev Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.

CVE-2026-69368 [HIGH] CWE-122 CVE-2026-69368: Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69594 [HIGH] CWE-122 CVE-2026-69594: Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorize Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

CVE-2026-69841 [HIGH] CWE-122 CVE-2026-69841: Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-69731 [HIGH] CWE-122 CVE-2026-69731: Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges l Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69283 [HIGH] CWE-122 CVE-2026-69283: Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privile Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69480 [HIGH] CWE-122 CVE-2026-69480: Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to e Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69433 [HIGH] CWE-122 CVE-2026-69433: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-72953 [HIGH] CWE-122 CVE-2026-72953: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69513 [HIGH] CWE-122 CVE-2026-69513: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-68848 [HIGH] CWE-122 CVE-2026-68848: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-73024 [HIGH] CWE-122 CVE-2026-73024: Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attack Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-68844 [HIGH] CWE-122 CVE-2026-68844: Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to exe Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.

CVE-2026-69921 [HIGH] CWE-122 CVE-2026-69921: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.

CVE-2026-69389 [HIGH] CWE-122 CVE-2026-69389: Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to e Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.

CVE-2026-70564 [HIGH] CWE-122 CVE-2026-70564: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.