cbcvebase.

Microsoft Windows 11 26H1 vulnerabilities

2,305 known vulnerabilities affecting microsoft/windows_11_26h1.

Total CVEs
2,305
CISA KEV
5
actively exploited
Public exploits
2
Exploited in wild
7
Severity breakdown
CRITICAL85HIGH1712MEDIUM504LOW4

Vulnerabilities

Page 64 of 116
CVE-2026-50697P3HIGHCVSS 7.8fixed in 10.0.28000.2269fixed in 10.0.28000.25252026-07-14
CVE-2026-50697 [HIGH] CWE-200 CVE-2026-50697: Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70566P3HIGHCVSS 7.8fixed in 10.0.28000.32312026-10-13
CVE-2026-70566 [HIGH] CWE-476 CVE-2026-70566: Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges loc Null pointer dereference in Windows Schannel allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69850P3HIGHCVSS 7.8fixed in 10.0.28000.32312026-10-13
CVE-2026-69850 [HIGH] CWE-822 CVE-2026-69850: Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privi Untrusted pointer dereference in Windows Certificates allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-84017P3HIGHCVSS 7.5fixed in 10.0.28000.32312026-10-13
CVE-2026-84017 [HIGH] CWE-476 CVE-2026-84017: Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized Null pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to deny service over a network.
nvd
CVE-2026-23672P3HIGHCVSS 7.8fixed in 10.0.28000.17192026-03-10
CVE-2026-23672 [HIGH] CWE-125 CVE-2026-23672: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
nvd
CVE-2026-50498P3HIGHCVSS 7.8fixed in 10.0.28000.25252026-07-14
CVE-2026-50498 [HIGH] CWE-125 CVE-2026-50498: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
nvd
CVE-2026-49790P3HIGHCVSS 7.8fixed in 10.0.28000.25252026-07-14
CVE-2026-49790 [HIGH] CWE-122 CVE-2026-49790: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
nvd
CVE-2026-25174P3HIGHCVSS 7.8fixed in 10.0.28000.17192026-03-10
CVE-2026-25174 [HIGH] CWE-125 CVE-2026-25174: Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate pr Out-of-bounds read in Windows Extensible File Allocation allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96933P3HIGHCVSS 7.8fixed in 10.0.28000.32312026-10-13
CVE-2026-96933 [HIGH] CWE-822 CVE-2026-96933: Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to Untrusted pointer dereference in Windows COM+ Event System Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96847P3HIGHCVSS 7.8fixed in 10.0.28000.32312026-10-13
CVE-2026-96847 [HIGH] CWE-822 CVE-2026-96847: Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83826P3HIGHCVSS 7.8fixed in 10.0.28000.32312026-10-13
CVE-2026-83826 [HIGH] CWE-822 CVE-2026-83826: Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate pr Untrusted pointer dereference in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-40404P3HIGHCVSS 7.8fixed in 10.0.28000.22692026-06-09
CVE-2026-40404 [HIGH] CWE-122 CVE-2026-40404: Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability
nvd
CVE-2026-50441P3HIGHCVSS 7.8fixed in 10.0.28000.2269fixed in 10.0.28000.25252026-07-14
CVE-2026-50441 [HIGH] CWE-822 CVE-2026-50441: Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32222P3HIGHCVSS 7.8fixed in 10.0.28000.18362026-04-14
CVE-2026-32222 [HIGH] CWE-822 CVE-2026-32222: Untrusted pointer dereference in Windows Win32K - ICOMP allows an authorized attacker to elevate pri Untrusted pointer dereference in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96953P3HIGHCVSS 7.8fixed in 10.0.28000.32312026-10-13
CVE-2026-96953 [HIGH] CWE-476 CVE-2026-96953: Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an author Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.
nvd
CVE-2026-32076P3HIGHCVSS 7.8fixed in 10.0.28000.18362026-04-14
CVE-2026-32076 [HIGH] CWE-125 CVE-2026-32076: Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to elevate pri Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-34336P3HIGHCVSS 7.8fixed in 10.0.28000.21132026-05-12
CVE-2026-34336 [HIGH] CWE-122 CVE-2026-34336: Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88180P3HIGHCVSS 7.8fixed in 10.0.28000.32312026-10-13
CVE-2026-88180 [HIGH] CWE-125 CVE-2026-88180: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96306P3HIGHCVSS 7.8fixed in 10.0.28000.32312026-10-13
CVE-2026-96306 [HIGH] CWE-125 CVE-2026-96306: Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges lo Out-of-bounds read in Windows Sysmain Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-88177P3HIGHCVSS 7.8fixed in 10.0.28000.32312026-10-13
CVE-2026-88177 [HIGH] CWE-125 CVE-2026-88177: Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges l Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
← Previous64 / 116Next →
Microsoft Windows 11 26H1 vulnerabilities | cvebase