Microsoft ≫ Windows 11 26h1

Time-of-check time-of-use (toctou) race condition in Windows Kernel allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacker to execute code over a network.

Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows BitLocker allows an authorized attacker to execute code locally.

Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Windows NTFS allows an authorized attacker to perform tampering locally.

Out-of-bounds read in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges over a network.