Microsoft Windows 11 Version 26H2 vulnerabilities

CVE-2026-83691 [HIGH] CWE-122 CVE-2026-83691: Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privilege Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges locally.

CVE-2026-83861 [HIGH] CWE-122 CVE-2026-83861: Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to eleva Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.

CVE-2026-88093 [HIGH] CWE-122 CVE-2026-88093: Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privil Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-85368 [HIGH] CWE-122 CVE-2026-85368: Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-83767 [HIGH] CWE-121 CVE-2026-83767: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.

CVE-2026-85867 [HIGH] CWE-122 CVE-2026-85867: Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2026-83754 [HIGH] CWE-122 CVE-2026-83754: Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code ov Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

CVE-2026-70095 [HIGH] CWE-122 CVE-2026-70095: Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.

CVE-2026-96071 [HIGH] CWE-122 CVE-2026-96071: Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a n Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network.

CVE-2026-85798 [HIGH] CWE-122 CVE-2026-85798: Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to execute code over a network.

CVE-2026-88091 [HIGH] CWE-502 CVE-2026-88091: Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacke Deserialization of untrusted data in Windows Management Instrumentation allows an authorized attacker to elevate privileges locally.

CVE-2026-96914 [HIGH] CWE-122 CVE-2026-96914: Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an auth Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.

CVE-2026-69945 [HIGH] CWE-862 CVE-2026-69945: Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally.

CVE-2026-70185 [HIGH] CWE-639 CVE-2026-70185: Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a securit Protection mechanism failure in Windows PowerShell allows an authorized attacker to bypass a security feature locally.

CVE-2026-70060 [HIGH] CWE-122 CVE-2026-70060: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-69918 [HIGH] CWE-122 CVE-2026-69918: Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privil Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges locally.

CVE-2026-83902 [HIGH] CWE-122 CVE-2026-83902: Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate pr Heap-based buffer overflow in Windows Direct Composition allows an authorized attacker to elevate privileges locally.

CVE-2026-70117 [HIGH] CWE-122 CVE-2026-70117: Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevat Heap-based buffer overflow in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

CVE-2026-83768 [HIGH] CWE-122 CVE-2026-83768: Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges loc Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.

CVE-2026-70103 [HIGH] CWE-122 CVE-2026-70103: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.