Microsoft Windows 11 Version 26H2 vulnerabilities

CVE-2026-70038 [HIGH] CWE-122 CVE-2026-70038: Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-69913 [HIGH] CWE-416 CVE-2026-69913: Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network. Use after free in Windows TCP/IP allows an unauthorized attacker to execute code over a network.

CVE-2026-85799 [HIGH] CWE-416 CVE-2026-85799: Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a Use after free in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.

CVE-2026-83923 [HIGH] CWE-23 CVE-2026-83923: Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

CVE-2026-70275 [HIGH] CWE-822 CVE-2026-70275: Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute co Untrusted pointer dereference in Windows CD-ROM Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-85818 [CRITICAL] CWE-347 CVE-2026-85818: Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-102225 [HIGH] CWE-125 CVE-2026-102225: Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a ne Out-of-bounds read in Windows Text Shaping allows an unauthorized attacker to execute code over a network.

CVE-2026-105007 [HIGH] CWE-125 CVE-2026-105007: An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) An elevation of privilege vulnerability exists in the Network Driver Interface Specification (NDIS) when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to elevate the attacker's privilege level. An attacker wh

CVE-2026-83771 [HIGH] CWE-416 CVE-2026-83771: Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate pri Use after free in Windows Camera Frame Server Monitor allows an unauthorized attacker to elevate privileges over an adjacent network.

CVE-2026-102214 [HIGH] CWE-416 CVE-2026-102214: Use after free in Windows Hyper-V allows an authorized attacker to execute code locally. Use after free in Windows Hyper-V allows an authorized attacker to execute code locally.

CVE-2026-70580 [HIGH] CWE-306 CVE-2026-70580: Missing authentication for critical function in Windows Credential Guard allows an authorized attack Missing authentication for critical function in Windows Credential Guard allows an authorized attacker to perform spoofing locally.

CVE-2026-70062 [HIGH] CWE-415 CVE-2026-70062: Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network. Double free in Windows Libarchive allows an unauthorized attacker to execute code over a network.

CVE-2026-85926 [HIGH] CWE-416 CVE-2026-85926: Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.

CVE-2026-70013 [HIGH] CWE-416 CVE-2026-70013: Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network. Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-83797 [HIGH] CWE-125 CVE-2026-83797: Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.

CVE-2026-70111 [HIGH] CWE-822 CVE-2026-70111: Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privilege Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges over a network.

CVE-2026-83699 [HIGH] CWE-121 CVE-2026-83699: Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attack Stack-based buffer overflow in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

CVE-2026-70014 [HIGH] CWE-416 CVE-2026-70014: Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over Use after free in Windows Cryptographic Services allows an authorized attacker to execute code over a network.

CVE-2026-83522 [HIGH] CWE-807 CVE-2026-83522: Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized Reliance on untrusted inputs in a security decision in Windows IKE Extension allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-83856 [HIGH] CWE-125 CVE-2026-83856: Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code Out-of-bounds read in Windows Event Logging Service allows an unauthorized attacker to execute code over a network.