Microsoft Windows 11 Version 26H1 vulnerabilities

CVE-2026-97841 [MEDIUM] CWE-125 CVE-2026-97841: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97837 [MEDIUM] CWE-125 CVE-2026-97837: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97838 [MEDIUM] CWE-125 CVE-2026-97838: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97840 [MEDIUM] CWE-125 CVE-2026-97840: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97835 [MEDIUM] CWE-125 CVE-2026-97835: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97839 [MEDIUM] CWE-125 CVE-2026-97839: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97836 [MEDIUM] CWE-125 CVE-2026-97836: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97844 [MEDIUM] CWE-125 CVE-2026-97844: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97831 [MEDIUM] CWE-125 CVE-2026-97831: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97843 [MEDIUM] CWE-125 CVE-2026-97843: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-69968 [MEDIUM] CWE-23 CVE-2026-69968: Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering o Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.

CVE-2026-69449 [MEDIUM] CWE-122 CVE-2026-69449: Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locall Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.

CVE-2026-71339 [MEDIUM] CWE-122 CVE-2026-71339: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-69820 [MEDIUM] CWE-122 CVE-2026-69820: Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges loca Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.

CVE-2026-97833 [MEDIUM] CWE-125 CVE-2026-97833: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97832 [MEDIUM] CWE-125 CVE-2026-97832: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-97834 [MEDIUM] CWE-125 CVE-2026-97834: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.

CVE-2026-69973 [MEDIUM] CWE-22 CVE-2026-69973: Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.

CVE-2026-62801 [MEDIUM] CWE-22 CVE-2026-62801: Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell Improper limitation of a pathname to a restricted directory ('path traversal') in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-32151 [MEDIUM] CWE-200 CVE-2026-32151: Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized att Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network.