Microsoft Windows 11 26H1 vulnerabilities
708 known vulnerabilities affecting microsoft/windows_11_26h1.
Total CVEs
708
CISA KEV
1
actively exploited
Public exploits
2
Exploited in wild
4
Severity breakdown
CRITICAL23HIGH537MEDIUM144LOW4
Vulnerabilities
Page 28 of 36
CVE-2026-33100P3HIGHCVSS 7.0fixed in 10.0.28000.18362026-04-14
CVE-2026-33100 [HIGH] CWE-416 CVE-2026-33100: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele
Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26169P3MEDIUMCVSS 6.1fixed in 10.0.28000.18362026-04-14
CVE-2026-26169 [MEDIUM] CWE-126 CVE-2026-26169: Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information loca
Buffer over-read in Windows Kernel Memory allows an authorized attacker to disclose information locally.
nvd
CVE-2026-48572P3HIGHCVSS 7.0fixed in 10.0.28000.22692026-07-14
CVE-2026-48572 [HIGH] CWE-362 CVE-2026-48572: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32068P3HIGHCVSS 7.0fixed in 10.0.28000.18362026-04-14
CVE-2026-32068 [HIGH] CWE-362 CVE-2026-32068: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SSDP Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-34337P3HIGHCVSS 7.0fixed in 10.0.28000.21132026-05-12
CVE-2026-34337 [HIGH] CWE-362 CVE-2026-34337: Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate pr
Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32091P3HIGHCVSS 7.0fixed in 10.0.28000.18362026-04-14
CVE-2026-32091 [HIGH] CWE-362 CVE-2026-32091: Concurrent execution using shared resource with improper synchronization ('race condition') in Micro
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Brokering File System allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2026-54107P3HIGHCVSS 7.0fixed in 10.0.28000.25252026-07-14
CVE-2026-54107 [HIGH] CWE-362 CVE-2026-54107: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50440P3HIGHCVSS 7.0fixed in 10.0.28000.2269fixed in 10.0.28000.25252026-07-14
CVE-2026-50440 [HIGH] CWE-362 CVE-2026-50440: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50321P3HIGHCVSS 7.0fixed in 10.0.28000.2269fixed in 10.0.28000.25252026-07-14
CVE-2026-50321 [HIGH] CWE-362 CVE-2026-50321: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-34334P3HIGHCVSS 7.0fixed in 10.0.28000.21132026-05-12
CVE-2026-34334 [HIGH] CWE-362 CVE-2026-34334: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-49803P3HIGHCVSS 7.0fixed in 10.0.28000.2269fixed in 10.0.28000.25252026-07-14
CVE-2026-49803 [HIGH] CWE-362 CVE-2026-49803: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50404P3HIGHCVSS 7.0fixed in 10.0.28000.2269fixed in 10.0.28000.25252026-07-14
CVE-2026-50404 [HIGH] CWE-362 CVE-2026-50404: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-49183P3HIGHCVSS 7.0fixed in 10.0.28000.2269fixed in 10.0.28000.25252026-07-14
CVE-2026-49183 [HIGH] CWE-362 CVE-2026-49183: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-54112P3HIGHCVSS 7.0fixed in 10.0.28000.25252026-07-14
CVE-2026-54112 [HIGH] CWE-362 CVE-2026-54112: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50384P3HIGHCVSS 7.0fixed in 10.0.28000.2269fixed in 10.0.28000.25252026-07-14
CVE-2026-50384 [HIGH] CWE-362 CVE-2026-50384: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clip Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50403P3HIGHCVSS 7.0fixed in 10.0.28000.2269fixed in 10.0.28000.25252026-07-14
CVE-2026-50403 [HIGH] CWE-362 CVE-2026-50403: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50450P3HIGHCVSS 7.0fixed in 10.0.28000.2269fixed in 10.0.28000.25252026-07-14
CVE-2026-50450 [HIGH] CWE-362 CVE-2026-50450: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50669P3HIGHCVSS 7.0fixed in 10.0.28000.25252026-07-14
CVE-2026-50669 [HIGH] CWE-362 CVE-2026-50669: Concurrent execution using shared resource with improper synchronization ('race condition') in Windo
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32223P3MEDIUMCVSS 6.8fixed in 10.0.28000.18362026-04-14
CVE-2026-32223 [MEDIUM] CWE-122 CVE-2026-32223: Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate pr
Heap-based buffer overflow in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.
nvd
CVE-2026-54132P3MEDIUMCVSS 6.8fixed in 10.0.28000.2269fixed in 10.0.28000.25252026-07-14
CVE-2026-54132 [MEDIUM] CWE-122 CVE-2026-54132: Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges w
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
nvd