cbcvebase.

Microsoft Windows 11 26H1 vulnerabilities

2,496 known vulnerabilities affecting microsoft/windows_11_26h1.

Total CVEs
2,496
CISA KEV
5
actively exploited
Public exploits
2
Exploited in wild
7
Severity breakdown
CRITICAL92HIGH1847MEDIUM553LOW4

Vulnerabilities

Page 76 of 125
CVE-2026-108128P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-108128 [MEDIUM] CWE-125 CVE-2026-108128: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-108129P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-108129 [MEDIUM] CWE-125 CVE-2026-108129: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-70025P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-70025 [MEDIUM] CWE-416 CVE-2026-70025: Use after free in Windows Netlogon allows an authorized attacker to deny service over a network. Use after free in Windows Netlogon allows an authorized attacker to deny service over a network.
nvd
CVE-2026-34348P3MEDIUMCVSS 6.5fixed in 10.0.28000.22692026-07-14
CVE-2026-34348 [MEDIUM] CWE-693 CVE-2026-34348: Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to discl Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-85331P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-85331 [MEDIUM] CWE-125 CVE-2026-85331: Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose i Out-of-bounds read in Windows Device Association Service allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97824P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-97824 [MEDIUM] CWE-125 CVE-2026-97824: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97827P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-97827 [MEDIUM] CWE-125 CVE-2026-97827: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97829P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-97829 [MEDIUM] CWE-125 CVE-2026-97829: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97823P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-97823 [MEDIUM] CWE-125 CVE-2026-97823: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97825P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-97825 [MEDIUM] CWE-125 CVE-2026-97825: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97821P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-97821 [MEDIUM] CWE-125 CVE-2026-97821: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97826P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-97826 [MEDIUM] CWE-125 CVE-2026-97826: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97820P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-97820 [MEDIUM] CWE-125 CVE-2026-97820: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97822P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-97822 [MEDIUM] CWE-125 CVE-2026-97822: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97841P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-97841 [MEDIUM] CWE-125 CVE-2026-97841: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97837P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-97837 [MEDIUM] CWE-125 CVE-2026-97837: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97838P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-97838 [MEDIUM] CWE-125 CVE-2026-97838: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97840P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-97840 [MEDIUM] CWE-125 CVE-2026-97840: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97835P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-97835 [MEDIUM] CWE-125 CVE-2026-97835: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
CVE-2026-97839P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-97839 [MEDIUM] CWE-125 CVE-2026-97839: Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a networ Out-of-bounds read in DNS Server allows an authorized attacker to disclose information over a network.
nvd
Microsoft Windows 11 26H1 vulnerabilities | cvebase