cbcvebase.

Microsoft Windows 11 26H2 vulnerabilities

517 known vulnerabilities affecting microsoft/windows_11_26h2.

Total CVEs
517
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL28HIGH352MEDIUM137

Vulnerabilities

Page 17 of 26
CVE-2026-70249P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-70249 [HIGH] CWE-416 CVE-2026-70249: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70271P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-70271 [HIGH] CWE-416 CVE-2026-70271: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70253P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-70253 [HIGH] CWE-416 CVE-2026-70253: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70176P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-70176 [HIGH] CWE-416 CVE-2026-70176: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-100200P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-100200 [HIGH] CWE-416 CVE-2026-100200: Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally Use after free in Windows Update Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70273P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-70273 [HIGH] CWE-416 CVE-2026-70273: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70236P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-70236 [HIGH] CWE-416 CVE-2026-70236: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70026P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-70026 [HIGH] CWE-416 CVE-2026-70026: Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges loc Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70045P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-70045 [HIGH] CWE-416 CVE-2026-70045: Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally. Use after free in Windows Work Folders allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83900P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-83900 [HIGH] CWE-416 CVE-2026-83900: Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges loc Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70209P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-70209 [HIGH] CWE-416 CVE-2026-70209: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70021P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-70021 [HIGH] CWE-416 CVE-2026-70021: Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges loc Use after free in Windows Direct Composition allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-108468P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-108468 [HIGH] CWE-416 CVE-2026-108468: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83853P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-83853 [HIGH] CWE-416 CVE-2026-83853: Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. Use after free in Windows Hello allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96852P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-96852 [HIGH] CWE-416 CVE-2026-96852: Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally. Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83866P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-83866 [HIGH] CWE-416 CVE-2026-83866: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally. Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83930P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-83930 [HIGH] CWE-416 CVE-2026-83930: Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privi Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96322P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-96322 [HIGH] CWE-416 CVE-2026-96322: Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privilege Use after free in Windows Remote Desktop Protocol allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-87715P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-87715 [HIGH] CWE-416 CVE-2026-87715: Use after free in Windows Installer allows an authorized attacker to elevate privileges locally. Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-97793P3HIGHCVSS 7.0fixed in 10.0.26300.97112026-10-13
CVE-2026-97793 [HIGH] CWE-306 CVE-2026-97793: Missing authentication for critical function in Windows Setup and Deployment allows an authorized at Missing authentication for critical function in Windows Setup and Deployment allows an authorized attacker to elevate privileges locally.
nvd
← Previous17 / 26Next →
Microsoft Windows 11 26H2 vulnerabilities | cvebase