cbcvebase.

Microsoft Windows 11 26H1 vulnerabilities

2,496 known vulnerabilities affecting microsoft/windows_11_26h1.

Total CVEs
2,496
CISA KEV
5
actively exploited
Public exploits
2
Exploited in wild
7
Severity breakdown
CRITICAL92HIGH1847MEDIUM553LOW4

Vulnerabilities

Page 89 of 125
CVE-2026-58544P3HIGHCVSS 7.0fixed in 10.0.28000.25252026-07-14
CVE-2026-58544 [HIGH] CWE-416 CVE-2026-58544: Use after free in Windows Management Services allows an authorized attacker to elevate privileges lo Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-56183P3HIGHCVSS 7.0fixed in 10.0.28000.25252026-07-14
CVE-2026-56183 [HIGH] CWE-416 CVE-2026-56183: Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges lo Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50372P3HIGHCVSS 7.0fixed in 10.0.28000.2269fixed in 10.0.28000.25252026-07-14
CVE-2026-50372 [HIGH] CWE-122 CVE-2026-50372: Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate priv Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-48571P3HIGHCVSS 7.0fixed in 10.0.28000.22692026-07-14
CVE-2026-48571 [HIGH] CWE-416 CVE-2026-48571: Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50410P3HIGHCVSS 7.0fixed in 10.0.28000.2269fixed in 10.0.28000.25252026-07-14
CVE-2026-50410 [HIGH] CWE-416 CVE-2026-50410: Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50323P3HIGHCVSS 7.0fixed in 10.0.28000.2269fixed in 10.0.28000.25252026-07-14
CVE-2026-50323 [HIGH] CWE-416 CVE-2026-50323: Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50392P3HIGHCVSS 7.0fixed in 10.0.28000.2269fixed in 10.0.28000.25252026-07-14
CVE-2026-50392 [HIGH] CWE-416 CVE-2026-50392: Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges loc Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-50449P3HIGHCVSS 7.0fixed in 10.0.28000.2269fixed in 10.0.28000.25252026-07-14
CVE-2026-50449 [HIGH] CWE-416 CVE-2026-50449: Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally. Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85802P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-85802 [HIGH] CWE-416 CVE-2026-85802: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83749P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-83749 [HIGH] CWE-416 CVE-2026-83749: Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally Use after free in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83852P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-83852 [HIGH] CWE-416 CVE-2026-83852: Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges loc Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85854P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-85854 [HIGH] CWE-416 CVE-2026-85854: Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges local Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-26165P3HIGHCVSS 7.0fixed in 10.0.28000.18362026-04-14
CVE-2026-26165 [HIGH] CWE-416 CVE-2026-26165: Use after free in Windows Shell allows an authorized attacker to elevate privileges locally. Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85823P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-85823 [HIGH] CWE-416 CVE-2026-85823: Use after free in Windows Composite Image File System allows an authorized attacker to elevate privi Use after free in Windows Composite Image File System allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85810P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-85810 [HIGH] CWE-416 CVE-2026-85810: Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges local Use after free in Windows Telephony Server allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85367P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-85367 [HIGH] CWE-416 CVE-2026-85367: Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate pri Use after free in Windows Cash Drawer Protocol Provider allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85352P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-85352 [HIGH] CWE-416 CVE-2026-85352: Use after free in Windows Device Association Service allows an authorized attacker to elevate privil Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85803P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-85803 [HIGH] CWE-416 CVE-2026-85803: Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privi Use after free in Windows Camera Frame Server Monitor allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85826P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-85826 [HIGH] CWE-787 CVE-2026-85826: Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges l Out-of-bounds write in Windows Fast FAT Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85342P3HIGHCVSS 7.0fixed in 10.0.28000.32312026-10-13
CVE-2026-85342 [HIGH] CWE-416 CVE-2026-85342: Use after free in Windows Device Association Service allows an authorized attacker to elevate privil Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
nvd
← Previous89 / 125Next →
Microsoft Windows 11 26H1 vulnerabilities | cvebase