Microsoft Windows 11 Version 25H2 vulnerabilities

CVE-2026-69420 High · 7.8 CWE-122 Sep 8, 2026

Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally.

CVE-2026-69418 High · 8.0 CWE-122 Sep 8, 2026

Volume Manager Driver Elevation of Privilege Vulnerability

Heap-based buffer overflow in Volume Manager Driver allows an authorized attacker to elevate privileges over a network.

CVE-2026-69413 High · 7.0 CWE-416 Sep 8, 2026

Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege Vulnerability

Use after free in Windows USB Audio Class driver (usbaudio.sys) allows an authorized attacker to elevate privileges locally.

CVE-2026-69408 Critical · 9.8 CWE-122 Sep 8, 2026

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Integer overflow or wraparound in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-69407 High · 7.8 CWE-190 Sep 8, 2026

Volume Manager Driver Elevation of Privilege Vulnerability

Integer overflow or wraparound in Volume Manager Driver allows an authorized attacker to elevate privileges locally.

CVE-2026-69406 Medium · 5.5 CWE-497 Sep 8, 2026

Windows Kernel Information Disclosure Vulnerability

Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an authorized attacker to disclose information locally.

CVE-2026-69404 High · 7.0 CWE-362 Sep 8, 2026

Windows TCP/IP Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-69403 Medium · 5.5 CWE-862 Sep 8, 2026

Windows SMB Server Information Disclosure Vulnerability

Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally.

CVE-2026-69401 High · 7.0 CWE-416 Sep 8, 2026

Audio Video Control Transport Protocol Elevation of Privilege Vulnerability

Use after free in Audio Video Control Transport Protocol allows an authorized attacker to elevate privileges locally.

CVE-2026-69398 High · 7.0 CWE-362 Sep 8, 2026

Windows Bluetooth Service Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69397 High · 7.5 CWE-416 Sep 8, 2026

Microsoft OpenSSH for Windows Remote Code Execution Vulnerability

Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

CVE-2026-69396 High · 7.1 CWE-416 Sep 8, 2026

Windows NDIS Elevation of Privilege Vulnerability

Use after free in Windows NDIS allows an authorized attacker to elevate privileges over a network.

CVE-2026-69394 High · 7.0 CWE-122 Sep 8, 2026

Windows Audio Service Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69393 Medium · 5.7 CWE-125 Sep 8, 2026

Windows Spaceport.sys Information Disclosure Vulnerability

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information over a network.

CVE-2026-69392 High · 7.8 CWE-416 Sep 8, 2026

Windows Shell Elevation of Privilege Vulnerability

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-69391 High · 7.8 CWE-121 Sep 8, 2026

Windows Broker Infrastructure Service Elevation of Privilege Vulnerability

Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69390 Medium · 5.5 CWE-125 Sep 8, 2026

Windows Spaceport.sys Information Disclosure Vulnerability

Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally.

CVE-2026-69389 High · 7.8 CWE-122 Sep 8, 2026

Windows Storage Management Provider Elevation of Privilege Vulnerability

Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.

CVE-2026-69388 High · 7.0 CWE-416 Sep 8, 2026

Windows Bluetooth Service Elevation of Privilege Vulnerability

Use after free in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.

CVE-2026-69386 High · 8.8 CWE-122 Sep 8, 2026

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.

CVE-2026-69385 High · 7.0 CWE-362 Sep 8, 2026

Windows TCP/IP Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.

CVE-2026-69384 High · 7.1 CWE-476 Sep 8, 2026

Virtual Hard Disk (VHD) Miniport Driver Denial of Service Vulnerability

Null pointer dereference in Virtual Hard Disk (VHD) Miniport Driver allows an unauthorized attacker to deny service locally.

CVE-2026-69383 High · 7.0 CWE-73 Sep 8, 2026

Windows Shell Elevation of Privilege Vulnerability

External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-69381 Medium · 4.6 CWE-125 Sep 8, 2026

Windows Storage Port Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows Storage Port Driver allows an unauthorized attacker to disclose information with a physical attack.

CVE-2026-69379 High · 7.0 CWE-59 Sep 8, 2026

Windows NTFS Elevation of Privilege Vulnerability

Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to elevate privileges locally.