cbcvebase.

Microsoft Windows 11 26H1 vulnerabilities

2,496 known vulnerabilities affecting microsoft/windows_11_26h1.

Total CVEs
2,496
CISA KEV
5
actively exploited
Public exploits
2
Exploited in wild
7
Severity breakdown
CRITICAL92HIGH1847MEDIUM553LOW4

Vulnerabilities

Page 84 of 125
CVE-2026-85805P3MEDIUMCVSS 6.5fixed in 10.0.28000.32312026-10-13
CVE-2026-85805 [MEDIUM] CWE-358 CVE-2026-85805: Improperly implemented security check for standard in Windows PowerShell allows an unauthorized atta Improperly implemented security check for standard in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2026-40413P3HIGHCVSS 7.4fixed in 10.0.28000.21132026-05-12
CVE-2026-40413 [HIGH] CWE-476 CVE-2026-40413: Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an a Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over an adjacent network.
nvd
CVE-2026-41097P3MEDIUMCVSS 6.7fixed in 10.0.28000.21132026-05-12
CVE-2026-41097 [MEDIUM] CWE-1329 CVE-2026-41097: Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker Reliance on a component that is not updateable in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2026-69383P3HIGHCVSS 7.0fixed in 10.0.28000.29542026-09-08
CVE-2026-69383 [HIGH] CWE-73 CVE-2026-69383: External control of file name or path in Windows Shell allows an authorized attacker to elevate priv External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32073P3HIGHCVSS 7.0fixed in 10.0.28000.18362026-04-14
CVE-2026-32073 [HIGH] CWE-416 CVE-2026-32073: Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to ele Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-25179P3HIGHCVSS 7.0fixed in 10.0.28000.17192026-03-10
CVE-2026-25179 [HIGH] CWE-1287 CVE-2026-25179: Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allo Improper validation of specified type of input in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85855P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-85855 [HIGH] CWE-416 CVE-2026-85855: Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges local Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-80093P3HIGHCVSS 7.0fixed in 10.0.28000.29542026-09-08
CVE-2026-80093 [HIGH] CWE-416 CVE-2026-80093: Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate pr Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-32070P3HIGHCVSS 7.0fixed in 10.0.28000.18362026-04-14
CVE-2026-32070 [HIGH] CWE-416 CVE-2026-32070: Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate pri Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83793P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-83793 [HIGH] CWE-59 CVE-2026-83793: Improper link resolution before file access ('link following') in Windows Update Orchestrator Servic Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83915P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-83915 [HIGH] CWE-416 CVE-2026-83915: Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privile Use after free in Windows Diagnostic Policy Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72968P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-72968 [HIGH] CWE-416 CVE-2026-72968: Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to e Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70205P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-70205 [HIGH] CWE-843 CVE-2026-70205: Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver f Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70118P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-70118 [HIGH] CWE-416 CVE-2026-70118: Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72969P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-72969 [HIGH] CWE-416 CVE-2026-72969: Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to e Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70140P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-70140 [HIGH] CWE-416 CVE-2026-70140: Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-108135P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-108135 [HIGH] CWE-59 CVE-2026-108135: Improper link resolution before file access ('link following') in Windows Backup Engine allows an au Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70230P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-70230 [HIGH] CWE-416 CVE-2026-70230: Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally. Use after free in Windows Audio Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-72934P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-72934 [HIGH] CWE-416 CVE-2026-72934: Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to e Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69596P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-69596 [HIGH] CWE-416 CVE-2026-69596: Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to e Use after free in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
nvd
← Previous84 / 125Next →
Microsoft Windows 11 26H1 vulnerabilities | cvebase