Microsoft Windows 11 Version 26H2 vulnerabilities

CVE-2026-70015 [HIGH] CWE-122 CVE-2026-70015: Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized at Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.

CVE-2026-69934 [HIGH] CWE-20 CVE-2026-69934: Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate pri Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-69957 [HIGH] CWE-126 CVE-2026-69957: Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate pr Integer overflow or wraparound in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-69916 [HIGH] CWE-190 CVE-2026-69916: Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges l Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-69952 [HIGH] CWE-125 CVE-2026-69952: Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges loc Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-85808 [HIGH] CWE-125 CVE-2026-85808: Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attack Out-of-bounds read in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.

CVE-2026-70228 [HIGH] CWE-125 CVE-2026-70228: Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges loc Out-of-bounds read in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-85843 [HIGH] CWE-908 CVE-2026-85843: Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an au Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

CVE-2026-108136 [HIGH] CWE-416 CVE-2026-108136: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-105004 [HIGH] CWE-125 CVE-2026-105004: Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges loc Out-of-bounds read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.

CVE-2026-83832 [HIGH] CWE-125 CVE-2026-83832: Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges loca Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.

CVE-2026-103553 [HIGH] CWE-125 CVE-2026-103553: Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate p Out-of-bounds read in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83587 [HIGH] CWE-822 CVE-2026-83587: Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate pri Untrusted pointer dereference in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

CVE-2026-70177 [HIGH] CWE-20 CVE-2026-70177: Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elev Numeric truncation error in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83585 [HIGH] CWE-134 CVE-2026-83585: Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-83826 [HIGH] CWE-822 CVE-2026-83826: Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate pr Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-96931 [HIGH] CWE-822 CVE-2026-96931: Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges lo Untrusted pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally.

CVE-2026-96324 [HIGH] CWE-416 CVE-2026-96324: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-70123 [HIGH] CWE-122 CVE-2026-70123: Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate pr Numeric truncation error in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83568 [HIGH] CWE-862 CVE-2026-83568: Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate priv Improper access control in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.