Microsoft Windows 11 Version 26H2 vulnerabilities

CVE-2026-70126 [HIGH] CWE-20 CVE-2026-70126: Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code Out-of-bounds read in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.

CVE-2026-83509 [HIGH] CWE-426 CVE-2026-83509: Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privil Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

CVE-2026-83785 [HIGH] CWE-416 CVE-2026-83785: Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privile Use after free in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83575 [HIGH] CWE-416 CVE-2026-83575: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83564 [HIGH] CWE-416 CVE-2026-83564: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83574 [HIGH] CWE-416 CVE-2026-83574: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-70156 [HIGH] CWE-416 CVE-2026-70156: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-69387 [HIGH] CWE-416 CVE-2026-69387: Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locall Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-85355 [HIGH] CWE-829 CVE-2026-85355: Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver al Inclusion of functionality from untrusted control sphere in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-83676 [HIGH] CWE-122 CVE-2026-83676: Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate Integer underflow (wrap or wraparound) in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-70086 [HIGH] CWE-416 CVE-2026-70086: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-70150 [HIGH] CWE-416 CVE-2026-70150: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-70136 [HIGH] CWE-416 CVE-2026-70136: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83689 [HIGH] CWE-416 CVE-2026-83689: Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locall Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-70115 [HIGH] CWE-416 CVE-2026-70115: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-88079 [HIGH] CWE-476 CVE-2026-88079: Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate pri Null pointer dereference in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

CVE-2026-97812 [HIGH] CWE-415 CVE-2026-97812: Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileg Double free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70212 [HIGH] CWE-923 CVE-2026-70212: Improper restriction of communication channel to intended endpoints in Windows Security Center allow Improper restriction of communication channel to intended endpoints in Windows Security Center allows an authorized attacker to elevate privileges locally.

CVE-2026-83505 [HIGH] CWE-367 CVE-2026-83505: Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorize Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

CVE-2026-85354 [HIGH] CWE-416 CVE-2026-85354: Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locall Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.