Microsoft Windows 11 Version 26H2 vulnerabilities

CVE-2026-83774 [MEDIUM] CWE-497 CVE-2026-83774: Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel S Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-83925 [MEDIUM] CWE-497 CVE-2026-83925: Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose informatio Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-83897 [MEDIUM] CWE-497 CVE-2026-83897: Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel S Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70077 [MEDIUM] CWE-416 CVE-2026-70077: Use after free in Windows Kernel allows an authorized attacker to disclose information locally. Use after free in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-70195 [MEDIUM] CWE-362 CVE-2026-70195: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to dis Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.

CVE-2026-69969 [MEDIUM] CWE-59 CVE-2026-69969: Improper link resolution before file access ('link following') in Windows AppX Deployment Service al Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally.

CVE-2026-102186 [MEDIUM] CWE-822 CVE-2026-102186: Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclo Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.

CVE-2026-83582 [MEDIUM] CWE-416 CVE-2026-83582: Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information loca Use after free in Windows Graphics Kernel allows an authorized attacker to disclose information locally.

CVE-2026-85866 [MEDIUM] CWE-497 CVE-2026-85866: Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an Exposure of sensitive system information to an unauthorized control sphere in Windows ALPC allows an authorized attacker to disclose information locally.

CVE-2026-83865 [MEDIUM] CWE-23 CVE-2026-83865: Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform t Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.

CVE-2026-70116 [MEDIUM] CWE-121 CVE-2026-70116: Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to bypass a security feature with a physical attack.

CVE-2026-69978 [MEDIUM] CWE-476 CVE-2026-69978: Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally. Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally.

CVE-2026-83786 [MEDIUM] CWE-209 CVE-2026-83786: Generation of error message containing sensitive information in Windows NTFS allows an authorized at Generation of error message containing sensitive information in Windows NTFS allows an authorized attacker to disclose information locally.

CVE-2026-83909 [MEDIUM] CWE-497 CVE-2026-83909: Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel S Exposure of sensitive system information to an unauthorized control sphere in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-70063 [MEDIUM] CWE-125 CVE-2026-70063: Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally. Out-of-bounds read in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-69506 [MEDIUM] CWE-125 CVE-2026-69506: Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose informa Out-of-bounds read in Windows Key Storage Provider allows an authorized attacker to disclose information locally.

CVE-2026-69974 [MEDIUM] CWE-125 CVE-2026-69974: Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information l Out-of-bounds read in Desktop Window Manager allows an authorized attacker to disclose information locally.

CVE-2026-83788 [MEDIUM] CWE-126 CVE-2026-83788: Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a phy Buffer over-read in Windows RNDIS allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-96853 [MEDIUM] CWE-367 CVE-2026-96853: Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an author Time-of-check time-of-use (toctou) race condition in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.

CVE-2026-83697 [MEDIUM] CWE-367 CVE-2026-83697: Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows a Time-of-check time-of-use (toctou) race condition in Windows Modern Device Management (MDM) allows an authorized attacker to perform tampering locally.