Microsoft Windows 11 26H1 vulnerabilities
2,082 known vulnerabilities affecting microsoft/windows_11_26h1.
Total CVEs
2,082
CISA KEV
5
actively exploited
Public exploits
2
Exploited in wild
7
Severity breakdown
CRITICAL78HIGH1543MEDIUM457LOW4
Vulnerabilities
Page 23 of 105
CVE-2026-69580P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69580 [HIGH] CWE-122 CVE-2026-69580: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69447P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69447 [HIGH] CWE-122 CVE-2026-69447: Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privile
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83981P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-83981 [HIGH] CWE-122 CVE-2026-83981: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83973P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-83973 [HIGH] CWE-122 CVE-2026-83973: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-80075P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-80075 [HIGH] CWE-122 CVE-2026-80075: Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileg
Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83955P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-83955 [HIGH] CWE-122 CVE-2026-83955: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83969P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-83969 [HIGH] CWE-122 CVE-2026-83969: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69790P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69790 [HIGH] CWE-122 CVE-2026-69790: Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-73011P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-73011 [HIGH] CWE-122 CVE-2026-73011: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69583P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69583 [HIGH] CWE-122 CVE-2026-69583: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-71343P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-71343 [HIGH] CWE-122 CVE-2026-71343: Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to execute code locally.
nvd
CVE-2026-83972P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-83972 [HIGH] CWE-122 CVE-2026-83972: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72946P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-72946 [HIGH] CWE-122 CVE-2026-72946: Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privilege
Heap-based buffer overflow in Storage Port Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69685P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69685 [HIGH] CWE-122 CVE-2026-69685: Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges l
Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69509P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69509 [HIGH] CWE-122 CVE-2026-69509: Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privilege
Heap-based buffer overflow in Windows Fax Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83995P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-83995 [HIGH] CWE-122 CVE-2026-83995: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83975P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-83975 [HIGH] CWE-122 CVE-2026-83975: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69293P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69293 [HIGH] CWE-20 CVE-2026-69293: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69323P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69323 [HIGH] CWE-122 CVE-2026-69323: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69444P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69444 [HIGH] CWE-122 CVE-2026-69444: Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate priv
Heap-based buffer overflow in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.
nvd