Microsoft Windows 11 26H1 vulnerabilities
2,082 known vulnerabilities affecting microsoft/windows_11_26h1.
Total CVEs
2,082
CISA KEV
5
actively exploited
Public exploits
2
Exploited in wild
7
Severity breakdown
CRITICAL78HIGH1543MEDIUM457LOW4
Vulnerabilities
Page 24 of 105
CVE-2026-83970P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-83970 [HIGH] CWE-122 CVE-2026-83970: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72990P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-72990 [HIGH] CWE-122 CVE-2026-72990: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83983P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-83983 [HIGH] CWE-122 CVE-2026-83983: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69542P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69542 [HIGH] CWE-122 CVE-2026-69542: Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to e
Heap-based buffer overflow in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-77904P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-77904 [HIGH] CWE-122 CVE-2026-77904: Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68888P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-68888 [HIGH] CWE-122 CVE-2026-68888: Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-73007P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-73007 [HIGH] CWE-122 CVE-2026-73007: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-78447P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-78447 [HIGH] CWE-122 CVE-2026-78447: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-73021P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-73021 [HIGH] CWE-20 CVE-2026-73021: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69589P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69589 [HIGH] CWE-122 CVE-2026-69589: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68885P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-68885 [HIGH] CWE-122 CVE-2026-68885: Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69420P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69420 [HIGH] CWE-122 CVE-2026-69420: Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privilege
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72996P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-72996 [HIGH] CWE-20 CVE-2026-72996: Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68890P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-68890 [HIGH] CWE-122 CVE-2026-68890: Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privil
Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65787P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-65787 [HIGH] CWE-122 CVE-2026-65787: Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privil
Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65814P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-65814 [HIGH] CWE-122 CVE-2026-65814: Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate p
Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62700P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-62700 [HIGH] CWE-122 CVE-2026-62700: Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges local
Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-61359P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-61359 [HIGH] CWE-122 CVE-2026-61359: Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62732P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-62732 [HIGH] CWE-122 CVE-2026-62732: Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate pri
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62695P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-62695 [HIGH] CWE-122 CVE-2026-62695: Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges lo
Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
nvd