Microsoft Windows 11 Version 26H2 vulnerabilities

CVE-2026-100216 [HIGH] CWE-121 CVE-2026-100216: Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges l Stack-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-102191 [HIGH] CWE-122 CVE-2026-102191: Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.

CVE-2026-83827 [HIGH] CWE-122 CVE-2026-83827: Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate Heap-based buffer overflow in Windows Bluetooth Port Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-88110 [HIGH] CWE-122 CVE-2026-88110: Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privi Heap-based buffer overflow in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83680 [HIGH] CWE-122 CVE-2026-83680: Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-85834 [HIGH] CWE-122 CVE-2026-85834: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-69452 [HIGH] CWE-416 CVE-2026-69452: Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privile Use after free in Windows Enterprise App Management allows an authorized attacker to elevate privileges over a network.

CVE-2026-85856 [HIGH] CWE-122 CVE-2026-85856: Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacke Heap-based buffer overflow in Windows Internet Connection Sharing (ICS) allows an authorized attacker to execute code over an adjacent network.

CVE-2026-83580 [HIGH] CWE-122 CVE-2026-83580: Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacke Heap-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

CVE-2026-100201 [HIGH] CWE-122 CVE-2026-100201: Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevat Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally.

CVE-2026-100203 [HIGH] CWE-122 CVE-2026-100203: Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows Update Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83724 [HIGH] CWE-122 CVE-2026-83724: Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to el Heap-based buffer overflow in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-85791 [HIGH] CWE-122 CVE-2026-85791: Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.

CVE-2026-83921 [HIGH] CWE-122 CVE-2026-83921: Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to el Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-69970 [HIGH] CWE-122 CVE-2026-69970: Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate p Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85828 [HIGH] CWE-122 CVE-2026-85828: Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.

CVE-2026-96868 [HIGH] CWE-122 CVE-2026-96868: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-83871 [HIGH] CWE-122 CVE-2026-83871: Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privilege Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.

CVE-2026-84014 [HIGH] CWE-122 CVE-2026-84014: Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to el Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85827 [HIGH] CWE-122 CVE-2026-85827: Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.