Microsoft Windows 11 Version 26H2 vulnerabilities

CVE-2026-88193 [HIGH] CWE-122 CVE-2026-88193: Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate pr Heap-based buffer overflow in Microsoft Scripting Engine allows an authorized attacker to elevate privileges locally.

CVE-2026-70149 [HIGH] CWE-122 CVE-2026-70149: Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (cs Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver (csc.sys) allows an authorized attacker to disclose information locally.

CVE-2026-96186 [HIGH] CWE-502 CVE-2026-96186: Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacke Deserialization of untrusted data in Microsoft Windows Media Foundation allows an authorized attacker to elevate privileges locally.

CVE-2026-83795 [HIGH] CWE-122 CVE-2026-83795: Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service Heap-based buffer overflow in Windows IKE Extension allows an unauthorized attacker to deny service over a network.

CVE-2026-69718 [HIGH] CWE-77 CVE-2026-69718: Improper neutralization of special elements used in a command ('command injection') in Windows Updat Improper neutralization of special elements used in a command ('command injection') in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-87716 [HIGH] CWE-122 CVE-2026-87716: Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to d Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to deny service over a network.

CVE-2026-102218 [HIGH] CWE-122 CVE-2026-102218: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-83758 [HIGH] CWE-122 CVE-2026-83758: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to execute code locally.

CVE-2026-85874 [HIGH] CWE-416 CVE-2026-85874: Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute cod Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to execute code locally.

CVE-2026-83654 [HIGH] CWE-306 CVE-2026-83654: Missing authentication for critical function in Windows Modern Device Management (MDM) allows an aut Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.

CVE-2026-97794 [HIGH] CWE-122 CVE-2026-97794: Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an a Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-97788 [HIGH] CWE-203 CVE-2026-97788: Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attack Observable discrepancy in Active Directory Federation Services (AD FS) allows an unauthorized attacker to disclose information over a network.

CVE-2026-69992 [HIGH] CWE-416 CVE-2026-69992: Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code ov Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.

CVE-2026-103577 [HIGH] CWE-453 CVE-2026-103577: Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass Insecure default variable initialization in Microsoft QUIC allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-85811 [HIGH] CWE-416 CVE-2026-85811: Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-83838 [HIGH] CWE-191 CVE-2026-83838: Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacke Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an authorized attacker to elevate privileges over an adjacent network.

CVE-2026-85864 [HIGH] CWE-641 CVE-2026-85864: Improper privilege management in Python allows an authorized attacker to elevate privileges locally. Improper privilege management in Python allows an authorized attacker to elevate privileges locally.

CVE-2026-100215 [HIGH] CWE-122 CVE-2026-100215: Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execut Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.

CVE-2026-69673 [HIGH] CWE-59 CVE-2026-69673: Improper link resolution before file access ('link following') in Windows Update allows an authorize Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally.

CVE-2026-70131 [HIGH] CWE-122 CVE-2026-70131: Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to elevate privileges locally.