Microsoft Windows 11 Version 26H2 vulnerabilities

CVE-2026-69940 [MEDIUM] CWE-125 CVE-2026-69940: Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

CVE-2026-70244 [MEDIUM] CWE-125 CVE-2026-70244: Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a netw Out-of-bounds read in DNS Server allows an unauthorized attacker to disclose information over a network.

CVE-2026-69955 [MEDIUM] CWE-125 CVE-2026-69955: Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.

CVE-2026-85859 [MEDIUM] CWE-476 CVE-2026-85859: Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to d Null pointer dereference in Windows Message Queuing Queue Manager allows an authorized attacker to deny service over a network.

CVE-2026-85847 [MEDIUM] CWE-125 CVE-2026-85847: Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose i Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.

CVE-2026-83908 [HIGH] CWE-763 CVE-2026-83908: Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate priv Release of invalid pointer or reference in RPC Runtime allows an authorized attacker to elevate privileges locally.

CVE-2026-88076 [HIGH] CWE-476 CVE-2026-88076: Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges lo Null pointer dereference in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-96209 [HIGH] CWE-125 CVE-2026-96209: Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privilege Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally.

CVE-2026-85853 [HIGH] CWE-125 CVE-2026-85853: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.

CVE-2026-96937 [HIGH] CWE-416 CVE-2026-96937: Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privil Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83510 [HIGH] CWE-367 CVE-2026-83510: Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorize Time-of-check time-of-use (toctou) race condition in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally.

CVE-2026-83750 [HIGH] CWE-122 CVE-2026-83750: Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized at Time-of-check time-of-use (toctou) race condition in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

CVE-2026-85943 [HIGH] CWE-122 CVE-2026-85943: Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) al Time-of-check time-of-use (toctou) race condition in Reliable Multicast Transport Driver (RMCAST) allows an authorized attacker to elevate privileges locally.

CVE-2026-83839 [HIGH] CWE-367 CVE-2026-83839: Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker t Time-of-check time-of-use (toctou) race condition in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-88149 [HIGH] CWE-415 CVE-2026-88149: Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevat Double free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-87710 [HIGH] CWE-362 CVE-2026-87710: Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized a Improper access control in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.

CVE-2026-69640 [MEDIUM] CWE-863 CVE-2026-69640: Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a Incorrect authorization in Windows Key Distribution Center allows an authorized attacker to bypass a security feature over a network.

CVE-2026-85939 [MEDIUM] CWE-1390 CVE-2026-85939: Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature ove Weak authentication in Windows Kernel allows an authorized attacker to bypass a security feature over a network.

CVE-2026-85362 [HIGH] CWE-763 CVE-2026-85362: Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized a Release of invalid pointer or reference in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-88098 [HIGH] CWE-822 CVE-2026-88098: Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized at Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally.