Microsoft Windows 11 Version 25H2 vulnerabilities

CVE-2026-68845 [HIGH] CWE-122 CVE-2026-68845: Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized a Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83952 [HIGH] CWE-122 CVE-2026-83952: Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-68877 [HIGH] CWE-122 CVE-2026-68877: Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to exe Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.

CVE-2026-69424 [HIGH] CWE-122 CVE-2026-69424: Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-69426 [HIGH] CWE-122 CVE-2026-69426: Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code loca Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally.

CVE-2026-69277 [HIGH] CWE-121 CVE-2026-69277: Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authoriz Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

CVE-2026-62739 [HIGH] CWE-122 CVE-2026-62739: Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-61355 [HIGH] CWE-122 CVE-2026-61355: Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate p Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62719 [HIGH] CWE-122 CVE-2026-62719: Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privi Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

CVE-2026-61926 [HIGH] CWE-122 CVE-2026-61926: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-62811 [HIGH] CWE-122 CVE-2026-62811: Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-62770 [HIGH] CWE-122 CVE-2026-62770: Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges loca Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-66799 [HIGH] CWE-122 CVE-2026-66799: Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.

CVE-2026-65790 [HIGH] CWE-122 CVE-2026-65790: Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privi Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

CVE-2026-62736 [HIGH] CWE-122 CVE-2026-62736: Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privilege Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.

CVE-2026-62717 [HIGH] CWE-122 CVE-2026-62717: Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privi Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

CVE-2026-62722 [HIGH] CWE-122 CVE-2026-62722: Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally.

CVE-2026-62735 [HIGH] CWE-122 CVE-2026-62735: Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-62890 [HIGH] CWE-122 CVE-2026-62890: Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.

CVE-2026-58601 [HIGH] CWE-122 CVE-2026-58601: Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.