Microsoft: >> Windows 11 24h2 >> 10.0.26100.2161 Security Vulnerabilities
CVE-2026-81963
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate privileges locally.
Known exploited
CVSS Score
7.8
EPSS Score
0.006
Published
2026-09-08
Heap-based buffer overflow in Windows Hello allows an authorized attacker to elevate privileges locally.
CVSS Score
8.2
EPSS Score
0.002
Published
2026-09-08
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVSS Score
7.0
EPSS Score
0.003
Published
2026-09-08
Out-of-bounds read in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.
CVSS Score
8.8
EPSS Score
0.007
Published
2026-09-08
Untrusted pointer dereference in Windows Hyper-V allows an authorized attacker to execute code locally.
CVSS Score
8.8
EPSS Score
0.002
Published
2026-09-08
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.
CVSS Score
7.8
EPSS Score
0.003
Published
2026-09-08
Buffer over-read in Windows Storage allows an unauthorized attacker to disclose information with a physical attack.
CVSS Score
4.3
EPSS Score
0.005
Published
2026-09-08
Out-of-bounds read in Windows CD-ROM Driver allows an unauthorized attacker to disclose information with a physical attack.
CVSS Score
4.6
EPSS Score
0.004
Published
2026-09-08
Out-of-bounds read in Xbox allows an unauthorized attacker to disclose information with a physical attack.
CVSS Score
4.3
EPSS Score
0.005
Published
2026-09-08
Use after free in Windows Security Health Service allows an authorized attacker to elevate privileges locally.
CVSS Score
7.0
EPSS Score
0.002
Published
2026-09-08