Microsoft Windows 11 26H1 vulnerabilities
2,082 known vulnerabilities affecting microsoft/windows_11_26h1.
Total CVEs
2,082
CISA KEV
5
actively exploited
Public exploits
2
Exploited in wild
7
Severity breakdown
CRITICAL78HIGH1543MEDIUM457LOW4
Vulnerabilities
Page 28 of 105
CVE-2026-102218P3HIGHCVSS 7.8fixed in 10.0.28000.32312026-10-13
CVE-2026-102218 [HIGH] CWE-122 CVE-2026-102218: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-102205P3HIGHCVSS 7.8fixed in 10.0.28000.32312026-10-13
CVE-2026-102205 [HIGH] CWE-122 CVE-2026-102205: Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an auth
Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50501P3HIGHCVSS 7.8fixed in 10.0.28000.25252026-07-14
CVE-2026-50501 [HIGH] CWE-121 CVE-2026-50501: Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker
Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-105003P3HIGHCVSS 7.8fixed in 10.0.28000.32312026-10-13
CVE-2026-105003 [HIGH] CWE-122 CVE-2026-105003: Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges l
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-97804P3HIGHCVSS 7.8fixed in 10.0.28000.32312026-10-13
CVE-2026-97804 [HIGH] CWE-122 CVE-2026-97804: Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges l
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-49184P3HIGHCVSS 7.8fixed in 10.0.28000.2269fixed in 10.0.28000.25252026-07-14
CVE-2026-49184 [HIGH] CWE-122 CVE-2026-49184: Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.
nvd
CVE-2026-83932P3HIGHCVSS 7.8fixed in 10.0.28000.32312026-10-13
CVE-2026-83932 [HIGH] CWE-122 CVE-2026-83932: Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileg
Heap-based buffer overflow in Windows Group Policy allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62810P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-62810 [HIGH] CWE-122 CVE-2026-62810: Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized att
Heap-based buffer overflow in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69359P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69359 [HIGH] CWE-122 CVE-2026-69359: Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elev
Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69368P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69368 [HIGH] CWE-122 CVE-2026-69368: Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privil
Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69594P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69594 [HIGH] CWE-122 CVE-2026-69594: Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorize
Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69841P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69841 [HIGH] CWE-122 CVE-2026-69841: Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to
Heap-based buffer overflow in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69731P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69731 [HIGH] CWE-122 CVE-2026-69731: Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges l
Heap-based buffer overflow in HID class driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69283P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69283 [HIGH] CWE-122 CVE-2026-69283: Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privile
Heap-based buffer overflow in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69480P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69480 [HIGH] CWE-122 CVE-2026-69480: Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to e
Heap-based buffer overflow in Windows Partition Management Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69433P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69433 [HIGH] CWE-122 CVE-2026-69433: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72953P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-72953 [HIGH] CWE-122 CVE-2026-72953: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69513P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69513 [HIGH] CWE-122 CVE-2026-69513: Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privi
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68848P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-68848 [HIGH] CWE-122 CVE-2026-68848: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-73024P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-73024 [HIGH] CWE-122 CVE-2026-73024: Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attack
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally.
nvd