Microsoft Windows 11 26H1 vulnerabilities
2,082 known vulnerabilities affecting microsoft/windows_11_26h1.
Total CVEs
2,082
CISA KEV
5
actively exploited
Public exploits
2
Exploited in wild
7
Severity breakdown
CRITICAL78HIGH1543MEDIUM457LOW4
Vulnerabilities
Page 17 of 105
CVE-2026-83861P3HIGHCVSS 7.8fixed in 10.0.28000.32312026-10-13
CVE-2026-83861 [HIGH] CWE-122 CVE-2026-83861: Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to eleva
Heap-based buffer overflow in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69284P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69284 [HIGH] CWE-122 CVE-2026-69284: Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privilege
Heap-based buffer overflow in Windows DCOM Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-71337P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-71337 [HIGH] CWE-121 CVE-2026-71337: Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to
Stack-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69290P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69290 [HIGH] CWE-121 CVE-2026-69290: Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to el
Stack-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69391P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69391 [HIGH] CWE-121 CVE-2026-69391: Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker t
Stack-based buffer overflow in Windows Broker Infrastructure Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65672P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-65672 [HIGH] CWE-122 CVE-2026-65672: Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62692P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-62692 [HIGH] CWE-122 CVE-2026-62692: Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to eleva
Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70344P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-70344 [HIGH] CWE-121 CVE-2026-70344: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62768P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-62768 [HIGH] CWE-121 CVE-2026-62768: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65671P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-65671 [HIGH] CWE-122 CVE-2026-65671: Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62877P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-62877 [HIGH] CWE-121 CVE-2026-62877: Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges lo
Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70346P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-70346 [HIGH] CWE-121 CVE-2026-70346: Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges
Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50412P3HIGHCVSS 7.8fixed in 10.0.28000.25252026-07-14
CVE-2026-50412 [HIGH] CWE-121 CVE-2026-50412: Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges loca
Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50400P3HIGHCVSS 7.8fixed in 10.0.28000.2269fixed in 10.0.28000.25252026-07-14
CVE-2026-50400 [HIGH] CWE-121 CVE-2026-50400: Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privil
Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-57096P3HIGHCVSS 7.8fixed in 10.0.28000.25252026-07-14
CVE-2026-57096 [HIGH] CWE-122 CVE-2026-57096: Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50318P3HIGHCVSS 7.8fixed in 10.0.28000.25252026-07-14
CVE-2026-50318 [HIGH] CWE-121 CVE-2026-50318: Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50387P3HIGHCVSS 7.8fixed in 10.0.28000.2269fixed in 10.0.28000.25252026-07-14
CVE-2026-50387 [HIGH] CWE-121 CVE-2026-50387: Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges local
Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88093P3HIGHCVSS 7.8fixed in 10.0.28000.32312026-10-13
CVE-2026-88093 [HIGH] CWE-122 CVE-2026-88093: Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privil
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69793P3HIGHCVSS 7.5fixed in 10.0.28000.29542026-09-08
CVE-2026-69793 [HIGH] CWE-1288 CVE-2026-69793: Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to
Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2026-70095P3HIGHCVSS 7.5fixed in 10.0.28000.32312026-10-13
CVE-2026-70095 [HIGH] CWE-122 CVE-2026-70095: Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a n
Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network.
nvd