Microsoft Windows 11 Version 25H2 vulnerabilities

CVE-2026-102202 [HIGH] CWE-59 CVE-2026-102202: Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an auth Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-23673 [HIGH] CWE-125 CVE-2026-23673: Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate Out-of-bounds read in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.

CVE-2025-62571 [HIGH] CWE-20 CVE-2025-62571: Improper input validation in Windows Installer allows an authorized attacker to elevate privileges l Improper input validation in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-33838 [HIGH] CWE-415 CVE-2026-33838: Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally. Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.

CVE-2026-20822 [HIGH] CWE-416 CVE-2026-20822: Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges l Use after free in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83877 [HIGH] CWE-190 CVE-2026-83877: Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privil Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.

CVE-2026-70172 [HIGH] CWE-822 CVE-2026-70172: Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges lo Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83570 [HIGH] CWE-416 CVE-2026-83570: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-69867 [HIGH] CWE-125 CVE-2026-69867: Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally. Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.

CVE-2026-70015 [HIGH] CWE-122 CVE-2026-70015: Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized at Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-49785 [HIGH] CWE-404 CVE-2026-49785: Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a secu Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.

CVE-2026-69934 [HIGH] CWE-20 CVE-2026-69934: Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate pri Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-69957 [HIGH] CWE-126 CVE-2026-69957: Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate pr Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69916 [HIGH] CWE-190 CVE-2026-69916: Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges l Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69952 [HIGH] CWE-125 CVE-2026-69952: Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges loc Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-85808 [HIGH] CWE-125 CVE-2026-85808: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attack Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

CVE-2026-70228 [HIGH] CWE-125 CVE-2026-70228: Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges loc Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-85843 [HIGH] CWE-908 CVE-2026-85843: Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an au Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-68896 [HIGH] CWE-36 CVE-2026-68896: Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to eleva Absolute path traversal in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2025-64673 [HIGH] CWE-284 CVE-2025-64673: Improper access control in Storvsp.sys Driver allows an authorized attacker to elevate privileges lo Improper access control in Storvsp.sys Driver allows an authorized attacker to elevate privileges locally.