Microsoft Windows 11 Version 26H2 vulnerabilities

CVE-2026-70280 [MEDIUM] CWE-863 CVE-2026-70280: Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally.

CVE-2026-83926 [MEDIUM] CWE-295 CVE-2026-83926: Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.

CVE-2026-83766 [MEDIUM] CWE-863 CVE-2026-83766: Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security featur Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network.

CVE-2026-88226 [MEDIUM] CWE-125 CVE-2026-88226: Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose inform Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-84009 [MEDIUM] CWE-367 CVE-2026-84009: Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authori Time-of-check time-of-use (toctou) race condition in Windows Projected File System allows an authorized attacker to perform tampering locally.

CVE-2026-102221 [MEDIUM] CWE-299 CVE-2026-102221: No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feat No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

CVE-2026-70075 [MEDIUM] CWE-367 CVE-2026-70075: Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enc Time-of-check time-of-use (toctou) race condition in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.