Microsoft Windows 11 Version 26H1 vulnerabilities

CVE-2026-33827 [HIGH] CWE-362 CVE-2026-33827: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

CVE-2026-24294 [HIGH] CWE-287 CVE-2026-24294: Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges lo Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

CVE-2026-83688 [HIGH] CWE-122 CVE-2026-83688: Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.

CVE-2026-88219 [HIGH] CWE-822 CVE-2026-88219: Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a Untrusted pointer dereference in RPC Runtime allows an unauthorized attacker to execute code over a network.

CVE-2026-81955 [HIGH] CWE-122 CVE-2026-81955: Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execut Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-73016 [HIGH] CWE-122 CVE-2026-73016: Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execut Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2026-69334 [HIGH] CWE-122 CVE-2026-69334: Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacke Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-69601 [HIGH] CWE-122 CVE-2026-69601: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-73023 [HIGH] CWE-122 CVE-2026-73023: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-69291 [HIGH] CWE-122 CVE-2026-69291: Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacke Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-62744 [HIGH] CWE-122 CVE-2026-62744: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-69360 [HIGH] CWE-122 CVE-2026-69360: Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-69860 [HIGH] CWE-122 CVE-2026-69860: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-69386 [HIGH] CWE-122 CVE-2026-69386: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-77495 [HIGH] CWE-122 CVE-2026-77495: Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute c Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.

CVE-2026-77504 [HIGH] CWE-415 CVE-2026-77504: Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network. Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

CVE-2026-69772 [HIGH] CWE-122 CVE-2026-69772: Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute Heap-based buffer overflow in Windows Network File System allows an unauthorized attacker to execute code over a network.

CVE-2026-69495 [HIGH] CWE-122 CVE-2026-69495: Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execu Heap-based buffer overflow in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.

CVE-2026-69511 [HIGH] CWE-122 CVE-2026-69511: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-69434 [HIGH] CWE-122 CVE-2026-69434: Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code ov Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network.