Microsoft Windows 11 Version 26H2 vulnerabilities

CVE-2026-88157 [HIGH] CWE-122 CVE-2026-88157: Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code ov Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

CVE-2026-85905 [HIGH] CWE-122 CVE-2026-85905: Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate p Heap-based buffer overflow in Windows UI Immersive Server allows an authorized attacker to elevate privileges locally.

CVE-2026-83716 [HIGH] CWE-122 CVE-2026-83716: Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally. Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-70229 [HIGH] CWE-863 CVE-2026-70229: Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execu Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.

CVE-2026-105008 [CRITICAL] CWE-420 CVE-2026-105008: No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-108463 [HIGH] CWE-41 CVE-2026-108463: Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to by Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.

CVE-2026-85817 [HIGH] CWE-807 CVE-2026-85817: Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized att Reliance on untrusted inputs in a security decision in Windows PowerShell allows an unauthorized attacker to execute code over a network.

CVE-2026-88116 [HIGH] CWE-822 CVE-2026-88116: Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a n Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88112 [HIGH] CWE-822 CVE-2026-88112: Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a n Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-85903 [HIGH] CWE-822 CVE-2026-85903: Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a n Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-88114 [HIGH] CWE-822 CVE-2026-88114: Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a n Untrusted pointer dereference in DNS Server allows an unauthorized attacker to execute code over a network.

CVE-2026-83929 [HIGH] CWE-787 CVE-2026-83929: Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network. Out-of-bounds write in Windows GDI allows an unauthorized attacker to execute code over a network.

CVE-2026-83914 [HIGH] CWE-416 CVE-2026-83914: Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network. Use after free in Microsoft XML allows an unauthorized attacker to execute code over a network.

CVE-2026-100218 [HIGH] CWE-416 CVE-2026-100218: Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code ove Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.

CVE-2026-85371 [HIGH] CWE-416 CVE-2026-85371: Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

CVE-2026-70207 [HIGH] CWE-122 CVE-2026-70207: Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute c Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.

CVE-2026-85936 [HIGH] CWE-122 CVE-2026-85936: Double free in Windows Shell allows an unauthorized attacker to execute code over a network. Double free in Windows Shell allows an unauthorized attacker to execute code over a network.

CVE-2026-105733 [HIGH] CWE-1419 CVE-2026-105733: Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally. Improper access control in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-96917 [HIGH] CWE-122 CVE-2026-96917: Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows PCI Bus Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-108460 [HIGH] CWE-416 CVE-2026-108460: Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a net Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.