Microsoft Windows 11 26H1 vulnerabilities
2,082 known vulnerabilities affecting microsoft/windows_11_26h1.
Total CVEs
2,082
CISA KEV
5
actively exploited
Public exploits
2
Exploited in wild
7
Severity breakdown
CRITICAL78HIGH1543MEDIUM457LOW4
Vulnerabilities
Page 29 of 105
CVE-2026-68844P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-68844 [HIGH] CWE-122 CVE-2026-68844: Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to exe
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
nvd
CVE-2026-69921P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69921 [HIGH] CWE-122 CVE-2026-69921: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69389P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69389 [HIGH] CWE-122 CVE-2026-69389: Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to e
Heap-based buffer overflow in Windows Storage Management Provider allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70564P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-70564 [HIGH] CWE-122 CVE-2026-70564: Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elev
Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68845P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-68845 [HIGH] CWE-122 CVE-2026-68845: Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized a
Heap-based buffer overflow in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83952P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-83952 [HIGH] CWE-122 CVE-2026-83952: Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-68877P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-68877 [HIGH] CWE-122 CVE-2026-68877: Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to exe
Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to execute code locally.
nvd
CVE-2026-69424P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69424 [HIGH] CWE-122 CVE-2026-69424: Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to
Heap-based buffer overflow in Windows Distributed File System (DFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69544P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69544 [HIGH] CWE-122 CVE-2026-69544: Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69426P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69426 [HIGH] CWE-122 CVE-2026-69426: Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code loca
Heap-based buffer overflow in Windows VOLSNAP.SYS allows an authorized attacker to execute code locally.
nvd
CVE-2026-69277P3HIGHCVSS 7.8fixed in 10.0.28000.29542026-09-08
CVE-2026-69277 [HIGH] CWE-121 CVE-2026-69277: Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authoriz
Stack-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62739P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-62739 [HIGH] CWE-122 CVE-2026-62739: Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-61355P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-61355 [HIGH] CWE-122 CVE-2026-61355: Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate p
Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62799P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-62799 [HIGH] CWE-122 CVE-2026-62799: Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62719P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-62719 [HIGH] CWE-122 CVE-2026-62719: Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privi
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-61926P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-61926 [HIGH] CWE-122 CVE-2026-61926: Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62811P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-62811 [HIGH] CWE-122 CVE-2026-62811: Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges l
Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-62770P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-62770 [HIGH] CWE-122 CVE-2026-62770: Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges loca
Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-66799P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-66799 [HIGH] CWE-122 CVE-2026-66799: Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65790P3HIGHCVSS 7.8fixed in 10.0.28000.27042026-08-11
CVE-2026-65790 [HIGH] CWE-122 CVE-2026-65790: Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privi
Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
nvd