Microsoft Windows 11 Version 26H1 vulnerabilities

CVE-2026-83895 [MEDIUM] CWE-122 CVE-2026-83895: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elev Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-69947 [MEDIUM] CWE-122 CVE-2026-69947: Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.

CVE-2026-69958 [MEDIUM] CWE-122 CVE-2026-69958: Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code Heap-based buffer overflow in Windows Overlay Filter allows an unauthorized attacker to execute code with a physical attack.

CVE-2026-70170 [MEDIUM] CWE-822 CVE-2026-70170: Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a Untrusted pointer dereference in Windows Kernel allows an authorized attacker to deny service over a network.

CVE-2026-72985 [MEDIUM] CWE-122 CVE-2026-72985: Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-62762 [MEDIUM] CWE-476 CVE-2026-62762: Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny s Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

CVE-2026-50366 [MEDIUM] CWE-476 CVE-2026-50366: Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny s Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

CVE-2026-57976 [MEDIUM] CWE-476 CVE-2026-57976: Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny s Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.

CVE-2026-56168 [MEDIUM] CWE-476 CVE-2026-56168: Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network.

CVE-2026-96863 [MEDIUM] CWE-122 CVE-2026-96863: Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate Heap-based buffer overflow in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.

CVE-2026-70019 [MEDIUM] CWE-65 CVE-2026-70019: Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose informati Windows hard link in Windows Compressed Folder allows an unauthorized attacker to disclose information over a network.

CVE-2026-102199 [MEDIUM] CWE-121 CVE-2026-102199: Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to d Stack-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to deny service over a network.

CVE-2026-78453 [MEDIUM] CWE-191 CVE-2026-78453: Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unautho Integer underflow (wrap or wraparound) in Microsoft Windows SCSI Class System File allows an unauthorized attacker to disclose information over a network.

CVE-2026-61921 [MEDIUM] CWE-125 CVE-2026-61921: Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

CVE-2026-55003 [MEDIUM] CWE-908 CVE-2026-55003: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

CVE-2026-50376 [MEDIUM] CWE-908 CVE-2026-50376: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

CVE-2026-58546 [MEDIUM] CWE-908 CVE-2026-58546: Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

CVE-2026-69635 [MEDIUM] CWE-122 CVE-2026-69635: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges with a physical attack.

CVE-2026-85790 [MEDIUM] CWE-416 CVE-2026-85790: Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a netw Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.

CVE-2025-21330 [HIGH] CWE-400 CVE-2025-21330: Windows Remote Desktop Services Denial of Service Vulnerability Windows Remote Desktop Services Denial of Service Vulnerability