Microsoft Windows 11 Version 26H2 vulnerabilities

CVE-2026-85374 [MEDIUM] CWE-125 CVE-2026-85374: Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locall Out-of-bounds read in Windows Installer allows an authorized attacker to disclose information locally.

CVE-2026-83760 [MEDIUM] CWE-125 CVE-2026-83760: Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose informati Out-of-bounds read in Microsoft Bluetooth Driver allows an authorized attacker to disclose information locally.

CVE-2026-96247 [MEDIUM] CWE-908 CVE-2026-96247: Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclo Use of uninitialized resource in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

CVE-2026-96314 [MEDIUM] CWE-125 CVE-2026-96314: Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information lo Out-of-bounds read in Windows Audio Service allows an authorized attacker to disclose information locally.

CVE-2026-85336 [MEDIUM] CWE-125 CVE-2026-85336: Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose i Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information locally.

CVE-2026-96846 [MEDIUM] CWE-125 CVE-2026-96846: Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally. Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.

CVE-2026-83875 [MEDIUM] CWE-125 CVE-2026-83875: Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information local Out-of-bounds read in HID Parser Library allows an authorized attacker to disclose information locally.

CVE-2026-83658 [MEDIUM] CWE-862 CVE-2026-83658: Improper access control in Windows Error Reporting allows an authorized attacker to disclose informa Improper access control in Windows Error Reporting allows an authorized attacker to disclose information locally.

CVE-2026-83764 [MEDIUM] CWE-863 CVE-2026-83764: Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally.

CVE-2026-85938 [MEDIUM] CWE-862 CVE-2026-85938: Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to discl Improper access control in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.

CVE-2026-85320 [MEDIUM] CWE-908 CVE-2026-85320: Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to d Use of uninitialized resource in Windows Print Spooler Components allows an authorized attacker to disclose information locally.

CVE-2026-88162 [MEDIUM] CWE-863 CVE-2026-88162: Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perf Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally.

CVE-2026-85857 [MEDIUM] CWE-532 CVE-2026-85857: Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized Insertion of sensitive information into log file in Windows Kernel-Mode Drivers allows an authorized attacker to disclose information locally.

CVE-2026-83885 [MEDIUM] CWE-326 CVE-2026-83885: Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an auth Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to perform spoofing locally.

CVE-2026-103567 [MEDIUM] CWE-126 CVE-2026-103567: Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose inf Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.

CVE-2026-96910 [MEDIUM] CWE-822 CVE-2026-96910: Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to Untrusted pointer dereference in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.

CVE-2026-96927 [MEDIUM] CWE-125 CVE-2026-96927: Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally. Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-83798 [MEDIUM] CWE-20 CVE-2026-83798: Improper verification of cryptographic signature in Windows Update Stack allows an authorized attack Improper verification of cryptographic signature in Windows Update Stack allows an authorized attacker to perform spoofing locally.

CVE-2026-83905 [MEDIUM] CWE-497 CVE-2026-83905: Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows a Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally.

CVE-2026-83672 [MEDIUM] CWE-497 CVE-2026-83672: Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allo Exposure of sensitive system information to an unauthorized control sphere in Windows Installer allows an authorized attacker to disclose information locally.