Microsoft Windows 11 Version 26H2 vulnerabilities

CVE-2026-87691 [HIGH] CWE-416 CVE-2026-87691: Use after free in Windows Management Services allows an authorized attacker to elevate privileges lo Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

CVE-2026-85860 [HIGH] CWE-416 CVE-2026-85860: Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate pri Use after free in Windows Message Queuing Queue Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-85863 [HIGH] CWE-416 CVE-2026-85863: Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85861 [HIGH] CWE-416 CVE-2026-85861: Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges Use after free in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.

CVE-2026-87712 [HIGH] CWE-416 CVE-2026-87712: Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to Use after free in Windows Quality of Service (QoS) Packet Scheduler allows an authorized attacker to elevate privileges locally.

CVE-2026-103568 [HIGH] CWE-122 CVE-2026-103568: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Credential Providers allows an authorized attacker to elevate privileges locally.

CVE-2026-85797 [HIGH] CWE-20 CVE-2026-85797: Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a net Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.

CVE-2026-83845 [HIGH] CWE-290 CVE-2026-83845: Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to per Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing locally.

CVE-2026-83855 [HIGH] CWE-191 CVE-2026-83855: Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to de Integer underflow (wrap or wraparound) in Windows WLAN Service allows an unauthorized attacker to deny service over a network.

CVE-2026-83843 [HIGH] CWE-125 CVE-2026-83843: Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker t Out-of-bounds read in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.

CVE-2026-83735 [HIGH] CWE-763 CVE-2026-83735: Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate p Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83669 [HIGH] CWE-908 CVE-2026-83669: Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate pr Use of uninitialized resource in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-70104 [HIGH] CWE-822 CVE-2026-70104: Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to ele Untrusted pointer dereference in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-88118 [HIGH] CWE-122 CVE-2026-88118: Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an a Integer overflow or wraparound in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-102202 [HIGH] CWE-59 CVE-2026-102202: Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an auth Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-83877 [HIGH] CWE-190 CVE-2026-83877: Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privil Integer overflow or wraparound in HID Parser Library allows an authorized attacker to elevate privileges locally.

CVE-2026-49785 [HIGH] CWE-404 CVE-2026-49785: Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a secu Improper resource shutdown or release in Windows UEFI allows an authorized attacker to bypass a security feature locally.

CVE-2026-70172 [HIGH] CWE-822 CVE-2026-70172: Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges lo Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83570 [HIGH] CWE-416 CVE-2026-83570: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-69867 [HIGH] CWE-125 CVE-2026-69867: Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally. Out-of-bounds read in SQLite allows an authorized attacker to elevate privileges locally.