Microsoft Windows 11 26H2 vulnerabilities
517 known vulnerabilities affecting microsoft/windows_11_26h2.
Total CVEs
517
CISA KEV
1
actively exploited
Public exploits
0
Exploited in wild
1
Severity breakdown
CRITICAL28HIGH352MEDIUM137
Vulnerabilities
Page 9 of 26
CVE-2026-83927P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-83927 [HIGH] CWE-59 CVE-2026-83927: Improper link resolution before file access ('link following') in Windows Registry allows an authori
Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83873P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-83873 [HIGH] CWE-23 CVE-2026-83873: Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-61931P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-61931 [HIGH] CWE-416 CVE-2026-61931: Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate pri
Use after free in Windows Perception Simulation Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69798P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-69798 [HIGH] CWE-416 CVE-2026-69798: Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileg
Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-69884P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-69884 [HIGH] CWE-126 CVE-2026-69884: Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.
Buffer over-read in Windows GDI allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-70102P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-70102 [HIGH] CWE-416 CVE-2026-70102: Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
Use after free in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-102220P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-102220 [HIGH] CWE-416 CVE-2026-102220: Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges lo
Use after free in Windows VHD miniport driver allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-97798P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-97798 [HIGH] CWE-88 CVE-2026-97798: Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error
Improper neutralization of argument delimiters in a command ('argument injection') in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-102216P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-102216 [HIGH] CWE-843 CVE-2026-102216: Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows
Access of resource using incompatible type ('type confusion') in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-102196P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-102196 [HIGH] CWE-416 CVE-2026-102196: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85911P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-85911 [HIGH] CWE-416 CVE-2026-85911: Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges lo
Use after free in Windows StateRepository API allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96946P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-96946 [HIGH] CWE-416 CVE-2026-96946: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96912P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-96912 [HIGH] CWE-416 CVE-2026-96912: Use after free in Windows Client License Service allows an authorized attacker to elevate privileges
Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-97806P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-97806 [HIGH] CWE-416 CVE-2026-97806: Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privil
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96947P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-96947 [HIGH] CWE-416 CVE-2026-96947: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96950P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-96950 [HIGH] CWE-416 CVE-2026-96950: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-83857P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-83857 [HIGH] CWE-121 CVE-2026-83857: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attac
Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96249P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-96249 [HIGH] CWE-416 CVE-2026-96249: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-85804P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-85804 [HIGH] CWE-416 CVE-2026-85804: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-96243P3HIGHCVSS 7.8fixed in 10.0.26300.97112026-10-13
CVE-2026-96243 [HIGH] CWE-59 CVE-2026-96243: Improper link resolution before file access ('link following') in Windows WalletService allows an au
Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally.
nvd