Microsoft Windows 11 Version 25H2 vulnerabilities

CVE-2026-85856 [HIGH] CWE-122 CVE-2026-85856: Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacke Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.

CVE-2026-83580 [HIGH] CWE-122 CVE-2026-83580: Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacke Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

CVE-2026-100201 [HIGH] CWE-122 CVE-2026-100201: Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevat Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally.

CVE-2026-100203 [HIGH] CWE-122 CVE-2026-100203: Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83724 [HIGH] CWE-122 CVE-2026-83724: Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to el Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-85791 [HIGH] CWE-122 CVE-2026-85791: Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-83921 [HIGH] CWE-122 CVE-2026-83921: Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to el Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-41108 [HIGH] CWE-122 CVE-2026-41108: Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privile Heap-based buffer overflow in Microsoft Windows DNS allows an authorized attacker to elevate privileges locally.

CVE-2026-69970 [HIGH] CWE-122 CVE-2026-69970: Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate p Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-68884 [HIGH] CWE-122 CVE-2026-68884: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-68897 [HIGH] CWE-122 CVE-2026-68897: Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.

CVE-2026-70568 [HIGH] CWE-122 CVE-2026-70568: Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to ele Heap-based buffer overflow in Windows Defender Firewall Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69621 [HIGH] CWE-122 CVE-2026-69621: Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privilege Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69394 [HIGH] CWE-122 CVE-2026-69394: Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privile Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-62753 [HIGH] CWE-122 CVE-2026-62753: Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-85828 [HIGH] CWE-122 CVE-2026-85828: Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-45653 [HIGH] CWE-122 CVE-2026-45653: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-96868 [HIGH] CWE-122 CVE-2026-96868: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83871 [HIGH] CWE-122 CVE-2026-83871: Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privilege Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

CVE-2026-84014 [HIGH] CWE-122 CVE-2026-84014: Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to el Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.